CVE-2022-49042
Inclusion of Untrusted Functionality in Synology Hyper Backup Explorer
Publication date: 2026-06-03
Last updated on: 2026-06-03
Assigner: Synology Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| synology | hyper_backup_explorer | 3.0.1-0156 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-829 | The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability allows local users to execute arbitrary code with high impact on confidentiality, integrity, and availability, which could potentially lead to unauthorized access or data breaches.
Such unauthorized code execution and potential data compromise may negatively affect compliance with standards and regulations like GDPR and HIPAA that require protection of sensitive data and system integrity.
However, there is no explicit information provided about the direct impact on compliance with these standards in the available context or resources.
Can you explain this vulnerability to me?
This vulnerability exists in the MinGW DLL component of Synology Hyper Backup Explorer versions before 3.0.1-0156. It involves the inclusion of functionality from an untrusted control sphere, which allows local users to execute arbitrary code on the affected system through unspecified methods.
How can this vulnerability impact me? :
The vulnerability can have a significant impact as it allows local users to execute arbitrary code with low privileges but without user interaction. This can lead to full compromise of confidentiality, integrity, and availability of the system, potentially allowing attackers to manipulate data, disrupt services, or gain unauthorized access.
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should update Synology Hyper Backup Explorer to version 3.0.1-0156 or later, as the issue affects versions before 3.0.1-0156.