CVE-2025-4679

Summary

A vulnerability in Synology Active Backup for Microsoft 365 allows remote authenticated attackers to obtain sensitive information via unspecified vectors.

Affected Software

Weaknesses

• CWE-522: Insufficiently Protected Credentials

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://modzero.com/en/blog/when-backups-open-backdoors-synology-active-backup-m365/
• https://modzero.com/static/MZ-25-02_modzero_Synology-Active-Backup-M365.pdf

References

• https://www.synology.com/en-global/security/advisory/Synology_SA_25_06

• ←Previous
• Next→