Product by Synology

    Diskstation Manager Unified Controller

    20 known vulnerabilities in Diskstation Manager Unified Controller (Synology), 1 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    8

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Diskstation Manager Unified Controller (Synology)
    CriticalCVE-2021-3156

    Sudo Heap-Based Buffer Overflow Vulnerability

    In CISA KEValso in 18 other products

    		7.8
    CriticalCVE-2022-22687

    Synology DiskStation Manager (DSM): Classic Buffer Overflow

    also in 2 other products

    		9.8
    CriticalCVE-2021-27649

    Synology DiskStation Manager (DSM): Use After Free

    also in 2 other products

    		9.8
    CriticalCVE-2021-26561

    Synology DiskStation Manager (DSM): Stack-based Buffer Overflow

    also in 4 other products

    		9.0
    CriticalCVE-2021-26562

    Synology DiskStation Manager (DSM): Out-of-bounds Write

    also in 4 other products

    		9.0
    CriticalCVE-2021-26566

    Synology DiskStation Manager (DSM): Insertion of Sensitive Information Into Sent Data

    also in 4 other products

    		8.3
    HighCVE-2021-29085

    Synology DiskStation Manager (DSM): Injection

    also in 2 other products

    		8.6
    HighCVE-2021-29087

    Synology DiskStation Manager (DSM): Path Traversal

    also in 2 other products

    		7.5
    HighCVE-2021-29084

    Synology DiskStation Manager (DSM): Injection

    also in 2 other products

    		7.5
    HighCVE-2021-26567

    Github/knik0 Faad2: Stack-based Buffer Overflow

    also in 4 other products

    		7.8
    CriticalCVE-2021-26560

    Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information

    also in 4 other products

    		9.0
    CriticalCVE-2024-45538

    Synology DiskStation Manager (DSM): Cross-Site Request Forgery (CSRF)

    also in 3 other products

    		9.6
    HighCVE-2023-0142

    Synology DiskStation Manager (DSM): Uncontrolled Search Path Element

    also in 5 other products

    		6.5
    HighCVE-2021-26565

    Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information

    also in 4 other products

    		8.3
    HighCVE-2024-45539

    Synology DiskStation Manager (DSM): Out-of-bounds Write

    also in 3 other products

    		7.5
    HighCVE-2021-29086

    Synology DiskStation Manager (DSM): Exposure of Sensitive Information to an Unauthorized Actor

    also in 2 other products

    		5.3
    HighCVE-2021-26564

    Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information

    also in 4 other products

    		8.3
    HighCVE-2023-2729

    Synology DiskStation Manager (DSM): security vulnerability

    also in 5 other products

    		5.9
    HighCVE-2021-26563

    Synology DiskStation Manager (DSM): Incorrect Authorization

    also in 4 other products

    		8.2
    HighCVE-2024-5401

    Synology DiskStation Manager (DSM): Improper Control of Dynamically-Managed Code Resources

    also in 3 other products

    		4.3

    All products by Synology