Read the docs
TI-2017-08206 Aliases CVE-2017-11149GHSA-p6v2-8cvh-3w66

Server-side request forgery in Synology Download Station

Priority LOW 32CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.

Why it matters now

EPSS 0.01599 75th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SynologySynology Download Station3.8.x before 3.8.5-3475 and 3.x before 3.5-2984—No fix listedCNA
  • Synology Download Station VendorSynology Affected 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 Fixed in — No fix listed CNA

CPE configurations NVD · 33

CPEVersionsRoleVendor
cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*3.2-2295VulnerableSynology
cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*3.3-2382VulnerableSynology
cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*3.3-2383VulnerableSynology
cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*3.3-2386VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*3.4-2477VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*3.4-2478VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*3.4-2480VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*3.4-2485VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*3.4-2486VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*3.4-2489VulnerableSynology
  • cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:* Versions 3.2-2295 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:* Versions 3.3-2382 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:* Versions 3.3-2383 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:* Versions 3.3-2386 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:* Versions 3.4-2477 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:* Versions 3.4-2478 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:* Versions 3.4-2480 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:* Versions 3.4-2485 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:* Versions 3.4-2486 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:* Versions 3.4-2489 Vulnerable ·Synology
Show 23 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*3.4-2490VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*3.4-2514VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*3.4-2555VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*3.4-2557VulnerableSynology
cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*3.4-2558VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*3.5-2638VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*3.5-2705VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*3.5-2706VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*3.5-2955VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*3.5-2956VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*3.5-2962VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*3.5-2963VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*3.5-2967VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*3.5-2968VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*3.5-2970VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*3.5-2973VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*3.5-2980VulnerableSynology
cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*3.5-2982VulnerableSynology
cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*3.8.0-3416VulnerableSynology
cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*3.8.1-3420VulnerableSynology
cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*3.8.2-3455VulnerableSynology
cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*3.8.3-3458VulnerableSynology
cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*3.8.4-3468VulnerableSynology
  • cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:* Versions 3.4-2490 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:* Versions 3.4-2514 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:* Versions 3.4-2555 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:* Versions 3.4-2557 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:* Versions 3.4-2558 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:* Versions 3.5-2638 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:* Versions 3.5-2705 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:* Versions 3.5-2706 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:* Versions 3.5-2955 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:* Versions 3.5-2956 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:* Versions 3.5-2962 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:* Versions 3.5-2963 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:* Versions 3.5-2967 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:* Versions 3.5-2968 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:* Versions 3.5-2970 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:* Versions 3.5-2973 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:* Versions 3.5-2980 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:* Versions 3.5-2982 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:* Versions 3.8.0-3416 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:* Versions 3.8.1-3420 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:* Versions 3.8.2-3455 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:* Versions 3.8.3-3458 Vulnerable ·Synology
  • cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:* Versions 3.8.4-3468 Vulnerable ·Synology

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-11149
  2. 2026-10-03 Alias added: GHSA-p6v2-8cvh-3w66

References

Advisory 1

  • TI-2021-13803 Command injection in Synology Download Station CVSS 3.1CRITICAL 9.9
  • TI-2021-13804 Improper privilege management in Synology Download Station CVSS 3.1CRITICAL 9.9
  • TI-2017-08213 Incorrect default permissions in Synology Download Station CVSS 3.0HIGH 7.8
  • TI-2021-12735 Server-side request forgery in Synology Download Station CVSS 3.1HIGH 7.7
  • TI-2021-13805 Server-side request forgery in Synology Download Station CVSS 3.1MEDIUM 5.0
  • TI-2015-05767 Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in… CVSS 2.0MEDIUM 4.3
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences