Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: Synology BeeStation OS (BSM), DiskStation Manager (DSM) — Synology-SA-24:20 DSM (PWN2OWN 2024) Clear all filters
TI-2024-34049 CVE-2024-50629 · GHSA-xwc2-pv6j-7344

Improper output encoding in Synology DiskStation Manager

Priority MEDIUM 56

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.3481 Published 2025-03-19 Fixed in 7.2.2-72806-1, 7.2.1-69057-6 +3 CWE-116
TI-2024-09673 CVE-2024-10445 · GHSA-fwhw-h3p7-gx3q

Improper certificate validation in Synology DiskStation Manager

Priority LOW 24

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00378 Published 2025-03-19 Fixed in 7.2.2-72806-1, 7.2.1-69057-6 +4 CWE-295
TI-2024-09669 CVE-2024-10441 · GHSA-3hx6-3qqx-qhvf

Improper output encoding in Synology DiskStation Manager

Priority MEDIUM 51

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01251 Published 2025-03-19 Fixed in 7.2.2-72806-1, 7.2.1-69057-6 +3 CWE-116