This vulnerability in Synology DSM arises from insufficient restriction on excessive authentication attempts in the Auto block feature. Remote attackers can exploit this weakness by conducting brute-force attacks to read certain limited files on affected versions of DSM prior to the specified fixed releases. The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, no user interaction, and limited confidentiality impact without integrity or availability impact.

The impact is limited to unauthorized reading of certain files via brute-force authentication attempts. There is no reported impact on integrity or availability. The vulnerability is rated low severity with a CVSS score of 3.7.

Fixed versions are available: 7.2.1-69057-10, 7.2.2-72806-7, and 7.3.2-86009-2. Users should upgrade to these or later versions to remediate the vulnerability. No additional mitigation guidance is provided or required beyond applying these official fixes.