Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology DiskStation Manager (DSM) 6.2-23739 Clear all filters
TI-2018-06454 CVE-2018-8916 · GHSA-4xw8-rvqf-qchf

Weak password recovery in Synology DiskStation Manager

Priority MEDIUM 40

Unverified password change vulnerability in Change Password in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to reset password without verification.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00977 Published 2018-06-08 Fixed in 6.2-23739 CWE-620
TI-2017-08869 CVE-2017-12075 · GHSA-926j-923w-jrrq

Command injection in Synology DiskStation Manager

Priority LOW 35

Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01937 Published 2018-06-08 Fixed in 6.2-23739 CWE-77