Sploitus

15 exploited vulnerabilities in Synology Diskstation Manager

Vulnerabilities with publicly known exploits

Vendors
Synology, Openvpn
With known exploits
15
Affected Synology Diskstation Manager versions
= 4.0, 4.2, 4.3, 4.3-3810, 6.2.3-25426-3, 6.2.3-25426-2, 5.2-5967-5, 6.2.4-25553, 6.1.1-15101-4, 5.2-5565

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2013-6955 5 exploits
CVSS 10.0 HIGH 2014-01-09FIX AVAILABLE
CVE-2021-26566
CVSS 9.0 CRITICAL 2021-02-26FIX AVAILABLE
CVE-2021-26562
CVSS 9.0 CRITICAL 2021-02-26FIX AVAILABLE
CVE-2021-26561
CVSS 9.0 CRITICAL 2021-02-26FIX AVAILABLE
CVE-2021-26560
CVSS 9.0 CRITICAL 2021-02-26FIX AVAILABLE
CVE-2020-27648
CVSS 9.0 CRITICAL 2020-10-29FIX AVAILABLE
CVE-2017-15889 5 exploits
CVSS 8.8 HIGH 2017-12-04FIX AVAILABLE
CVE-2021-26564
CVSS 8.7 HIGH 2021-02-26FIX AVAILABLE
CVE-2021-26565
CVSS 8.3 HIGH 2021-02-26FIX AVAILABLE
CVE-2020-27652
CVSS 8.3 HIGH 2020-10-29FIX AVAILABLE
CVE-2021-26563
CVSS 8.2 HIGH 2021-02-26FIX AVAILABLE
CVE-2013-6987 5 exploits
CVSS 7.5 HIGH 2013-12-31FIX AVAILABLE
CVE-2020-27656
CVSS 6.5 MEDIUM 2020-10-29FIX AVAILABLE
CVE-2017-9554 8 exploits
CVSS 5.3 MEDIUM 2017-07-24FIX AVAILABLE
CVE-2015-4655
CVSS 4.3 MEDIUM 2015-06-18FIX AVAILABLE