Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Release: Synology DiskStation Manager (DSM) 6.2.3-25426-3 Clear all filters
TI-2021-08290 CVE-2021-26566 · GHSA-x5fh-xfvr-gg7m

Information disclosure in Synology DiskStation Manager

Priority MEDIUM 42

Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickC…

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01508 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-201
TI-2021-08289 CVE-2021-26565 · GHSA-8rp4-gqh3-jpxm

Cleartext transmission of sensitive information in Synology DiskStation Manager

Priority LOW 37

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP sessio…

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.00742 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-319
TI-2021-08288 CVE-2021-26564 · GHSA-77r2-rjfh-m7wh

Cleartext transmission of sensitive information in Synology DiskStation Manager

Priority LOW 39

Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00668 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-319
TI-2021-08286 CVE-2021-26562 · GHSA-fxpg-8qq8-225c

Out-of-bounds write in Synology DiskStation Manager

Priority MEDIUM 43

Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.01898 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-787
TI-2021-08285 CVE-2021-26561 · GHSA-4pfw-794r-7wqp

Stack-based buffer overflow in Synology DiskStation Manager

Priority MEDIUM 43

Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.02061 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-121
TI-2021-08284 CVE-2021-26560 · GHSA-3wrg-wf8p-659h

Cleartext transmission of sensitive information in Synology DiskStation Manager

Priority MEDIUM 40

Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.

CVSS 3.1CRITICAL 9.0 Network No auth No interaction EPSS 0.00766 Published 2021-02-26 Fixed in 6.2.3-25426-3 CWE-319