DM
Product
Diskstation Manager Unified Controller
On CISA KEVExploited in the wild
20
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 14Medium 2Low 0
Watch
Add Diskstation Manager Unified Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22687 | 9.8 | Mar 25 | Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3… Affected: before 3.1-23033 |
| CVE-2021-27649 | 9.8 | Jun 23 | Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via… Affected: before 3.1-23033 |
| CVE-2024-45538 | 9.6 | Dec 4 | Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller… Affected: 3.1-23028 before 3.1.4-23079 |
| CVE-2021-26566 | 9.0 | Feb 26 | Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to… Affected: 3.0 |
Showing 4