Product by Synology
Skynas Firmware
13 known vulnerabilities in Skynas Firmware (Synology), 1 of them actively exploited (CISA KEV).
Key figures
13
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-3156 | Sudo Heap-Based Buffer Overflow Vulnerability In CISA KEValso in 18 other products | 7.8 | |
| Critical | CVE-2021-26561 | Synology DiskStation Manager (DSM): Stack-based Buffer Overflow | 9.0 | |
| Critical | CVE-2021-26562 | Synology DiskStation Manager (DSM): Out-of-bounds Write | 9.0 | |
| Critical | CVE-2021-26566 | Synology DiskStation Manager (DSM): Insertion of Sensitive Information Into Sent Data | 8.3 | |
| High | CVE-2021-26567 | Github/knik0 Faad2: Stack-based Buffer Overflow | 7.8 | |
| Critical | CVE-2021-26560 | Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information | 9.0 | |
| High | CVE-2020-27652 | Synology DiskStation Manager (DSM): Use of a Broken or Risky Cryptographic Algorithm | 8.3 | |
| High | CVE-2021-26565 | Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information | 8.3 | |
| Critical | CVE-2020-27648 | Synology DiskStation Manager (DSM): Improper Certificate Validation | 8.3 | |
| High | CVE-2021-26564 | Synology DiskStation Manager (DSM): Cleartext Transmission of Sensitive Information | 8.3 | |
| High | CVE-2021-26563 | Synology DiskStation Manager (DSM): Incorrect Authorization | 8.2 | |
| Medium | CVE-2019-3870 | The Samba Project Samba: Incorrect Default Permissions | 6.1 | |
| Medium | CVE-2020-27650 | Synology DiskStation Manager (DSM): Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | 5.8 |