Synology Download Station vulnerabilities

3 vulnerabilities

Known vulnerabilities in Synology Download Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2021-33184synologydownload_station+1
EPSS score
1.00%
Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users to read arbitrary files via unspecified vectors.7.8CVE-2017-11156synologydownload_station+1
EPSS score
2.30%
Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.6.5CVE-2017-11149synologydownload_station+1
EPSS score
1.60%
Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.