Synology 脆弱性

タイムライン

タイプ

Network Attached Storage Software110
Not Defined94
Router Operating System25
Calendar Software11
Network Encryption Software4

製品

Synology DiskStation Manager72
Synology Photo Station36
Synology Router Manager25
Synology Surveillance Station15
Synology Calendar11

修復

Official Fix236
Temporary Fix0
Workaround2
Unavailable3
Not Defined11

悪用可能性

High5
Functional0
Proof-of-Concept21
Unproven1
Not Defined225

アクセスベクター

Not Defined0
Physical0
Local15
Adjacent5
Network232

認証

Not Defined0
High19
Low127
None106

ユーザー操作

Not Defined0
Required31
None221

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤410
≤551
≤673
≤746
≤844
≤919
≤109

CVSSv3 Temp

≤10
≤20
≤30
≤416
≤549
≤678
≤755
≤833
≤913
≤108

VulDB

≤10
≤20
≤34
≤434
≤555
≤651
≤756
≤836
≤97
≤109

NVD

≤10
≤20
≤30
≤42
≤512
≤639
≤726
≤826
≤931
≤1018

CNA

≤10
≤20
≤30
≤41
≤517
≤627
≤724
≤820
≤99
≤1010

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k27
<2k160
<5k65
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k252
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (57): Android Moments (1), Antivirus Essential (1), Application Service (2), Assistant (1), Audio Station (4), BC500 (1), Calendar (11), CardDAV Server (3), Chat (3), Cloud Station (1), Cloud Station Drive (1), DNS Server (2), DS107 (1), DS116 (1), DS3622xs+ (4), DSM (8), DS audio (1), DS file (1), DS photo+ (1), DiskStation (1), DiskStation Manager (72), Docker (1), Download Station (8), Drive (4), Dsm (1), FS3410 (4), File Station (3), HD6500 (4), MailPlus Server (3), Mail Station (1), Media Server (4), Moments (1), NAS (1), Note Station (4), Note Station Client (1), Office (3), Photo Station (36), Photo Station Uploader (1), Presto File Server (2), QTS (1), QuTS Hero (1), QuTScloud (1), RT6600ax (1), Router Manager (25), SSL VPN Client (3), SSO Server (2), SafeAccess (2), Storage Analyzer (1), Surveillance Station (15), Surveillance Station Pro (2), TC500 (1), USB Copy (1), Universal Search (1), VPN Plus Server (1), Video Station (5), WebDAV Server (1), Web Station (1)

Link to Vendor Website: https://www.synology.com/

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2024年03月28日6.05.9Synology Surveillance Station WebAPI GetStmUrlPath 特権昇格未知Not DefinedOfficial Fix0.000430.00CVE-2024-29228
2024年03月28日8.17.9Synology Surveillance Station WebAPI 特権昇格未知Not DefinedOfficial Fix0.000430.03CVE-2024-29241
2024年03月28日4.34.2Synology Surveillance Station WebAPI LayoutSave 特権昇格未知Not DefinedOfficial Fix0.000430.00CVE-2024-29240
2024年03月28日5.95.7Synology Surveillance Station WebAPI Recording.CountByCategory SQLインジェクション未知Not DefinedOfficial Fix0.000430.05CVE-2024-29239
2024年03月28日5.95.7Synology Surveillance Station WebAPI Log.CountByCategory SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29238
2024年03月28日5.95.7Synology Surveillance Station WebAPI ActionRule.Delete SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29237
2024年03月28日5.95.7Synology Surveillance Station WebAPI AudioPattern.Delete SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29236
2024年03月28日5.95.7Synology Surveillance Station WebAPI Layout.LayoutSave SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29227
2024年03月28日5.95.7Synology Surveillance Station WebAPI IOModule.EnumLog SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29235
2024年03月28日5.95.7Synology Surveillance Station WebAPI Group.Save SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29234
2024年03月28日5.95.7Synology Surveillance Station WebAPI Emap.Delete SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29233
2024年03月28日5.95.7Synology Surveillance Station WebAPI Alert.Enum SQLインジェクション未知Not DefinedOfficial Fix0.000430.03CVE-2024-29232
2024年03月28日5.95.7Synology Surveillance Station WebAPI UserPrivilege.Enum メモリ破損未知Not DefinedOfficial Fix0.000430.00CVE-2024-29231
2024年03月28日5.95.7Synology Surveillance Station WebAPI SnapShot.CountByCategory SQLインジェクション未知Not DefinedOfficial Fix0.000430.00CVE-2024-29230
2024年03月28日6.05.9Synology Surveillance Station WebAPI GetLiveViewPath 特権昇格未知Not DefinedOfficial Fix0.000430.03CVE-2024-29229
2024年01月24日4.34.3Synology DiskStation Manager File Access RedirectNetwork Attached Storage SoftwareNot DefinedOfficial Fix0.000470.02CVE-2024-0854
2024年01月17日7.57.2Synology RT6600ax Qualcomm LDB Service 特権昇格未知Not DefinedOfficial Fix0.001210.06CVE-2024-21473
2023年10月25日4.04.0Synology SSL VPN Client CGI メモリ破損Network Encryption SoftwareNot DefinedOfficial Fix0.000420.00CVE-2023-5748
2023年10月25日8.07.9Synology BC500/TC500 CGI Format String未知Not DefinedOfficial Fix0.001140.00CVE-2023-5746
2023年08月31日5.35.2Synology Router Manager CGI 情報の漏洩Router Operating SystemNot DefinedOfficial Fix0.001160.00CVE-2023-41741
2023年08月31日7.77.6Synology Router Manager 特権昇格Router Operating SystemNot DefinedOfficial Fix0.001300.03CVE-2023-41738
2023年08月31日5.35.2Synology Router Manager CGI ディレクトリトラバーサルRouter Operating SystemNot DefinedOfficial Fix0.000930.02CVE-2023-41740
2023年08月31日5.45.4Synology Router Manager サービス拒否Router Operating SystemNot DefinedOfficial Fix0.000930.00CVE-2023-41739
2023年06月13日5.75.7Synology DiskStation Manager User Management 弱い暗号化Network Attached Storage SoftwareNot DefinedOfficial Fix0.000800.05CVE-2023-2729
2023年06月13日7.06.9Synology DiskStation Manager Backup Management 特権昇格Network Attached Storage SoftwareNot DefinedOfficial Fix0.000520.02CVE-2023-0142

227 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 227 results.

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!