How many CVEs does synology download station have?

synology download station has 8 published CVE records since 2015.

How many synology download station CVEs are in CISA KEV?

None of synology download station's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for synology download station vulnerabilities?

Yes — 2 of synology download station's CVEs have a known public exploit.

Which versions of synology download station are affected?

39 distinct synology download station versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in synology download station CVEs?

synology download station's CVEs most often map to these CWE weakness types: CWE-918 (Server-Side Request Forgery (SSRF)), CWE-269 (Improper Privilege Management), CWE-276 (Incorrect Default Permissions), CWE-77 (Improper Neutralization of Special Elements used in a Command ('Command Injection')).

How many critical synology download station vulnerabilities are there?

synology download station has 2 critical and 2 high-severity CVEs.

What is the average severity of synology download station CVEs?

The average CVSS base score across synology download station's scored CVEs is 6.9.

synology download station Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every synology download station version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.8.16-35663 CVEs
3.2-2295 <= v <= 3.2-22952 CVEs
3.3-2382 <= v <= 3.3-23822 CVEs
3.3-2383 <= v <= 3.3-23832 CVEs
3.3-2386 <= v <= 3.3-23862 CVEs
3.4-2477 <= v <= 3.4-24772 CVEs
3.4-2478 <= v <= 3.4-24782 CVEs
3.4-2480 <= v <= 3.4-24802 CVEs
3.4-2485 <= v <= 3.4-24852 CVEs
3.4-2486 <= v <= 3.4-24862 CVEs
3.4-2489 <= v <= 3.4-24892 CVEs
3.4-2490 <= v <= 3.4-24902 CVEs
3.4-2514 <= v <= 3.4-25142 CVEs
3.4-2555 <= v <= 3.4-25552 CVEs
3.4-2557 <= v <= 3.4-25572 CVEs
3.4-2558 <= v <= 3.4-25582 CVEs
3.5-2638 <= v <= 3.5-26382 CVEs
3.5-2705 <= v <= 3.5-27052 CVEs
3.5-2706 <= v <= 3.5-27062 CVEs
3.5-2955 <= v <= 3.5-29552 CVEs
3.5-2956 <= v <= 3.5-29562 CVEs
3.5-2962 <= v <= 3.5-29622 CVEs
3.5-2963 <= v <= 3.5-29632 CVEs
3.5-2967 <= v <= 3.5-29672 CVEs
3.5-2968 <= v <= 3.5-29682 CVEs
3.5-2970 <= v <= 3.5-29702 CVEs
3.5-2973 <= v <= 3.5-29732 CVEs
3.5-2980 <= v <= 3.5-29802 CVEs
3.5-2982 <= v <= 3.5-29822 CVEs
3.8.0-3416 <= v <= 3.8.0-34162 CVEs
3.8.1-3420 <= v <= 3.8.1-34202 CVEs
3.8.2-3455 <= v <= 3.8.2-34552 CVEs
3.8.3-3458 <= v <= 3.8.3-34582 CVEs
3.8.4-3468 <= v <= 3.8.4-34682 CVEs
< 3.8.15-35631 CVE
<= 3.5-29561 CVE
<= 3.5-29631 CVE

Fixed in

3.8.16-35663 CVEs
3.8.15-35631 CVE

Find a version

8 CVEs

Sort

Critical vulnerability · 2021-06-18
CVE-2021-34809
Patch
CWE-77
Critical · CVSS 9.9
EPSS 1.9% (78th pct)2021-06-18
Critical vulnerability · 2021-06-18
CVE-2021-34810
Patch
CWE-269
Critical · CVSS 9.9
EPSS 1.4% (69th pct)2021-06-18
Medium vulnerability · 2021-06-18
CVE-2021-34811
Patch
CWE-918
Medium · CVSS 5.0
EPSS 0.8% (52th pct)2021-06-18
High vulnerability · 2021-06-01
CVE-2021-33184
Patch
CWE-918
High · CVSS 7.7
EPSS 1.0% (59th pct)2021-06-01
High vulnerability · 2017-08-14
CVE-2017-11156CWE-276
High · CVSS 7.8
EPSS 2.3% (82th pct)2017-08-14
Medium vulnerability · 2017-08-14
CVE-2017-11149CWE-918
Medium · CVSS 6.5
EPSS 1.6% (73th pct)2017-08-14
Medium vulnerability · 2015-09-11
CVE-2015-6913
Public exploit
Medium · CVSS 4.3
EPSS 1.9% (78th pct)2015-09-11
Medium vulnerability · 2015-09-11
CVE-2015-6909
Public exploit
Medium · CVSS 4.3
EPSS 2.1% (80th pct)2015-09-11

synology download station Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges

Fixed in

Common weakness types

Disclosure activity by year

Other synology products

Frequently asked questions

References

Track synology download station vulnerabilities