CVE security advisories and vulnerability history for DiskStation Manager (DSM) by synology.
72
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
5
Public exploits
PoC or exploit code
7.3
Avg CVSS
2017–2026
Last updated
Overview
synology DiskStation Manager (DSM) has 72 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
Severity and exploitation
How the CVSS severity of synology DiskStation Manager (DSM)'s CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical16
High28
Medium25
Low3
In CISA’s Known Exploited Vulnerabilities catalog
0
None of synology DiskStation Manager (DSM)'s CVEs are currently listed in CISA's KEV catalog.
Public exploits
5
5 of synology DiskStation Manager (DSM)'s CVEs have a known public exploit available.
Affected versions and CVEs
Browse every synology DiskStation Manager (DSM) version named in a CVE, then pick one to see only the CVEs that affect it.
Specific versions
before 6.0.3-8754-61 CVE
before 6.1.4-152171 CVE
Version ranges
< 7.2.123 CVEs
7.2.1 <= v < 7.2.1-69057-1011 CVEs
7.2.2 <= v < 7.2.2-72806-711 CVEs
7.3 <= v < 7.3.2-86009-210 CVEs
7.2.1 <= v < 7.2.1-69057-128 CVEs
7.2.2 <= v < 7.2.2-72806-98 CVEs
7.3.2 <= v < 7.3.2-86009-48 CVEs
7.4 <= v < 7.4-900758 CVEs
Common weakness types
The CWE weakness categories most often found in synology DiskStation Manager (DSM) CVEs. Follow any weakness for its full explanation.
Common questions about synology DiskStation Manager (DSM) vulnerabilities.
How many CVEs does synology DiskStation Manager (DSM) have?
synology DiskStation Manager (DSM) has 72 published CVE records since 2017.
How many synology DiskStation Manager (DSM) CVEs are in CISA KEV?
None of synology DiskStation Manager (DSM)'s CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for synology DiskStation Manager (DSM) vulnerabilities?
Yes — 5 of synology DiskStation Manager (DSM)'s CVEs have a known public exploit.
Which versions of synology DiskStation Manager (DSM) are affected?
91 distinct synology DiskStation Manager (DSM) versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in synology DiskStation Manager (DSM) CVEs?
synology DiskStation Manager (DSM)'s CVEs most often map to these CWE weakness types: CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-116 (Improper Encoding or Escaping of Output), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How many critical synology DiskStation Manager (DSM) vulnerabilities are there?
synology DiskStation Manager (DSM) has 16 critical and 28 high-severity CVEs.
What is the average severity of synology DiskStation Manager (DSM) CVEs?
The average CVSS base score across synology DiskStation Manager (DSM)'s scored CVEs is 7.3.
