Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Synology Download Station 3.8.16-3566 Clear all filters
TI-2021-13803 CVE-2021-34809 · GHSA-46j9-2j4r-83q6

Command injection in Synology Download Station

Priority MEDIUM 46

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01935 Published 2021-06-18 Fixed in 3.8.16-3566 CWE-77
TI-2021-13804 CVE-2021-34810 · GHSA-473c-wh3w-ppx8

Improper privilege management in Synology Download Station

Priority MEDIUM 45

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01369 Published 2021-06-18 Fixed in 3.8.16-3566 CWE-269
TI-2021-13805 CVE-2021-34811 · GHSA-h4r4-pw7f-hp8j

Server-side request forgery in Synology Download Station

Priority LOW 24

Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00764 Published 2021-06-18 Fixed in 3.8.16-3566 CWE-918