RCE for NAS exposed to internet or via quickconnect service, and has the photos app installed. Please use a VPN like tailscale to access your devices. You can host your own controlplane for tailscale with headscale too.
Synology zero-day discovered during pwn2own hacker contest. Stay safe out there.
https://www.wired.com/story/synology-zero-click-vulnerability/
RCE for NAS exposed to internet or via quickconnect service, and has the photos app installed. Please use a VPN like tailscale to access your devices. You can host your own controlplane for tailscale with headscale too.
No replies yet.