DM
Product
Diskstation Manager
On CISA KEVExploited in the wild
96
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 18High 45Medium 25Low 2
Watch
Add Diskstation Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-27656 | 3.7 | Oct 29 | Cleartext transmission of sensitive information vulnerability in DDNS in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to eavesdrop… Affected: 6.2 before 6.2.3-25426-2 |
| CVE-2020-27650 | 3.7 | Oct 29 | Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to… Affected: 6.2 before 6.2.3-25426-2 |
Showing 2