CVE security advisories and vulnerability history for diskstation manager by synology.
136
Total CVEs
Published
1
In CISA KEV
Exploited in the wild
26
Public exploits
PoC or exploit code
7.2
Avg CVSS
2013–2026
Last updated
Overview
synology diskstation manager has 136 published CVE records since 2013, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 26 have a known public exploit. The average CVSS base score across scored CVEs is 7.2. Affected platforms include ds3622xs+, fs3410, hd6500.
Severity and exploitation
How the CVSS severity of synology diskstation manager's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical29
High49
Medium54
Low4
In CISA’s Known Exploited Vulnerabilities catalog
1
One of synology diskstation manager's CVEs is confirmed exploited in the wild.
Public exploits
26
26 of synology diskstation manager's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every synology diskstation manager version named in a CVE, then pick one to see only the CVEs that affect it.
Version ranges
6.2 <= v <= 6.245 CVEs
7.1 <= v <= 7.133 CVEs
7.2 <= v <= 7.230 CVEs
< 6.2.3-25426-311 CVEs
6.2 <= v < 6.2.3-25426-37 CVEs
6.2 <= v < 6.2.4-25556-36 CVEs
7.0 <= v < 7.0.1-42218-26 CVEs
5.2 <= v <= 5.25 CVEs
< 6.2.4-255534 CVEs
< 7.1.1-42962-24 CVEs
6.0 <= v <= 6.04 CVEs
Common weakness types
The CWE weakness categories most often found in synology diskstation manager CVEs. Follow any weakness for its full explanation.
Common questions about synology diskstation manager vulnerabilities.
How many CVEs does synology diskstation manager have?
synology diskstation manager has 136 published CVE records since 2013.
How many synology diskstation manager CVEs are in CISA KEV?
Yes — 1 of synology diskstation manager's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for synology diskstation manager vulnerabilities?
Yes — 26 of synology diskstation manager's CVEs have a known public exploit.
Which versions of synology diskstation manager are affected?
115 distinct synology diskstation manager versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in synology diskstation manager CVEs?
synology diskstation manager's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption).
How many critical synology diskstation manager vulnerabilities are there?
synology diskstation manager has 29 critical and 49 high-severity CVEs.
What is the average severity of synology diskstation manager CVEs?
The average CVSS base score across synology diskstation manager's scored CVEs is 7.2.
