Read the docs

Synology

Records375All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical61CVSS 9.0–10.0
CVSS high133CVSS 7.0–8.9

Exploited now

Synology records in CISA KEV
TI-2021-02242 Sudo Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 93KEV 2022-04-06TI-2020-01431 Microsoft Netlogon Privilege Escalation Vulnerability Priority CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records
Diskstation Manager 97 records CRITICAL Router Manager 59 records CRITICAL Photo Station 33 records HIGH Surveillance Station 25 records MEDIUM Vs960hd Firmware 22 records CRITICAL Diskstation Manager Unified Controller 20 records CRITICAL Skynas 16 records CRITICAL Skynas Firmware 13 records CRITICAL

Records

9 records in Bc500 Firmware · all components

TI-2024-26302 CVE-2024-39349 · GHSA-fc4v-676g-hqh4

Buffer overflow in Synology Camera Firmware

Priority MEDIUM 52

A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01444 Published 2024-06-28 Fixed in 1.0.7-0298 CWE-120
TI-2024-10315 CVE-2024-11131 · GHSA-75ww-mcr4-2298

Out-of-bounds read in Synology Camera Firmware

Priority MEDIUM 50

A vulnerability regarding out-of-bounds read is found in the video interface.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00772 Published 2025-03-19 Fixed in 1.2.0-0525 CWE-125
TI-2024-26304 CVE-2024-39351 · GHSA-jpcf-pv77-3mfc

OS command injection in Synology Camera Firmware

Priority LOW 37

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01547 Published 2024-06-28 Fixed in 1.0.7-0298 CWE-78
TI-2023-25910 CVE-2023-47802 · GHSA-h7wv-22h8-mr42

OS command injection in Synology Camera Firmware

Priority LOW 37

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01464 Published 2024-06-28 Fixed in 1.0.7-0298 CWE-78
TI-2024-05077 CVE-2024-5463 · GHSA-xrv9-h656-4rpq

Buffer overflow in Synology Camera Firmware

Priority LOW 35

A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00407 Published 2024-06-04 Fixed in 1.1.1-0383 CWE-120
TI-2023-25911 CVE-2023-47803 · GHSA-jv4f-v7gg-5mvh

Path traversal in Synology Camera Firmware

Priority LOW 31

A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0072 Published 2024-06-28 Fixed in 1.0.7-0298 CWE-22
TI-2024-26305 CVE-2024-39352 · GHSA-h2m9-38g2-xrh9

Incorrect authorization in Synology Camera Firmware

Priority LOW 24

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00867 Published 2024-06-28 Fixed in 1.0.7-0298 CWE-863
Open these records in search →