Synology DSM vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

31 matching records

High7.5Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrarVuln · CVE-2025-1021 · Synology · DiskStation Manager (DSM) · CVE.org · FIRST EPSS · EUVD · SynologyCheck if you run itEPSS 0.53%Apr 23, 2025
Critical9.8synology beestation_os Improper Encoding or Escaping of OutputVuln · CVE-2024-10441 · synology · beestation os · NIST NVD · VulnCheck KEV · SynologyPatch nowKEVEPSS 1.25%Mar 19, 2025
Unknownsynology calendar Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2019-11829 · synology · calendar · CVE.org · FIRST EPSS · VulnCheck KEV · SynologyPatch nowKEVEPSS 2.25%Sep 18, 2024
Unknownsynology diskstation_manager Exposure of Sensitive Information to an Unauthorized ActorVuln · CVE-2017-9554 · synology · diskstation_manager · CVE.org · FIRST EPSS · Exploit Database · SynologyPatch nowKEVEPSS 76.72%Dec 23, 2021
High7.8Sudo Heap-Based Buffer Overflow VulnerabilityVuln · CVE-2021-3156 · Sudo · Sudo · CISA KEV · CVE.org · FIRST EPSS · Synology, TrellixPatch nowKEVEPSS 99.96%Jan 26, 2021
Medium5.5Microsoft Netlogon Privilege Escalation VulnerabilityVuln · CVE-2020-1472 · Microsoft · Netlogon · CISA KEV · CVE.org · FIRST EPSS · Microsoft, SynologyPatch nowKEVEPSS 99.39%Aug 17, 2020

Sort