Skynas Firmware vulnerabilities | LiveThreat CVE Feed

Product

Skynas Firmware

by Synology · last CVE Feb 26, 2021

On CISA KEVExploited in the wild

CVEs

On KEV

9.0

Max CVSS

New 30D

Vulnerabilities13 In the news0 Timeline

Severity mix

Critical 2High 7Medium 3Low 1

Severity

All severities13 Critical2 High7 Medium3 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Skynas Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-3156 In wildKEV	7.8	100%	Jan 26	Sudo Heap-Based Buffer Overflow Vulnerability Affected: All versions, or not specified
CVE-2021-26566	9.0	2%	Feb 26	Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to… Affected: All versions, or not specified
CVE-2020-27648	9.0	1%	Oct 29	Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and… Affected: before 6.2.3-25426
CVE-2021-26564	8.7	1%	Feb 26	Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof… Affected: All versions, or not specified
CVE-2020-27652	8.3	1%	Oct 29	Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain… Affected: before 6.2.3-25426
CVE-2021-26562	8.1	2%	Feb 26	Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via… Affected: All versions, or not specified
CVE-2021-26561	8.1	2%	Feb 26	Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary… Affected: All versions, or not specified
CVE-2021-26567	7.8	1%	Feb 26	Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options Affected: All versions, or not specified
CVE-2021-26560	7.4	1%	Feb 26	Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers… Affected: All versions, or not specified
CVE-2021-26563	6.7	1%	Feb 26	Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified… Affected: All versions, or not specified
CVE-2019-3870	6.1	1%	Apr 9	A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2 Affected: All versions, or not specified
CVE-2021-26565	5.9	1%	Feb 26	Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain… Affected: All versions, or not specified
CVE-2020-27650	3.7	1%	Oct 29	Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to… Affected: before 6.2.3-25426