Browse all 295 CVE security advisories affecting Synology. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Synology operates primarily in the network-attached storage (NAS) sector, providing hardware and software solutions for data management and backup. With 271 recorded Common Vulnerabilities and Exposures (CVEs), the platform has historically been susceptible to critical security flaws, including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. These issues often stem from insecure default configurations, weak authentication mechanisms, and unpatched web interface components. Notable incidents include the discovery of backdoors in certain firmware versions and widespread exploitation of unauthenticated access points, which allowed attackers to gain full system control. The high volume of CVEs reflects the complexity of its web-based management interfaces and the persistent targeting of IoT devices by threat actors. Users are advised to maintain strict update protocols and disable unnecessary services to mitigate these known risks effectively.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-53282 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) CWE-79 | 5.9 | Medium | 2024-12-09 |
| CVE-2024-53281 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) CWE-79 | 5.9 | Medium | 2024-12-09 |
| CVE-2024-53279 | Synology Router Manager 跨站脚本漏洞 — Synology Router Manager (SRM) CWE-79 | 5.9 | Medium | 2024-12-09 |
| CVE-2024-53280 | Synology Router Manager 跨站脚本漏洞 — Synology Router Manager (SRM) CWE-79 | 5.9 | Medium | 2024-12-09 |
| CVE-2023-52944 | Synology Surveillance Station 安全漏洞 — Surveillance Station CWE-863 | 4.3 | Medium | 2024-12-04 |
| CVE-2023-52943 | Synology Surveillance Station 安全漏洞 — Surveillance Station CWE-863 | 4.3 | Medium | 2024-12-04 |
| CVE-2024-11398 | Synology Router Manager 路径遍历漏洞 — Synology Router Manager (SRM) CWE-22 | 8.1 | High | 2024-12-04 |
| CVE-2024-10443 | Synology BeePhotos 命令注入漏洞 — BeePhotos CWE-78 | 9.8 | Critical | 2024-11-15 |
| CVE-2023-52949 | Synology Active Backup for Business Agent 访问控制错误漏洞 — Synology Active Backup for Business Agent CWE-306 | 5.5 | Medium | 2024-09-26 |
| CVE-2023-52948 | Synology Active Backup for Business Agent 安全漏洞 — Synology Active Backup for Business Agent CWE-311 | 5.0 | Medium | 2024-09-26 |
| CVE-2023-52947 | Synology Active Backup for Business Agent 访问控制错误漏洞 — Synology Active Backup for Business Agent CWE-306 | 4.0 | Medium | 2024-09-26 |
| CVE-2023-52950 | Synology Active Backup for Business Agent 安全漏洞 — Synology Active Backup for Business Agent CWE-311 | 5.3 | Medium | 2024-09-26 |
| CVE-2022-49041 | 多款产品安全漏洞 — Synology Drive Client CWE-120 | 4.4 | Medium | 2024-09-26 |
| CVE-2022-49040 | Synology Drive 安全漏洞 — Synology Drive Client CWE-120 | 4.4 | Medium | 2024-09-26 |
| CVE-2022-49039 | Synology Drive 安全漏洞 — Synology Drive Client CWE-787 | 6.7 | Medium | 2024-09-26 |
| CVE-2022-49038 | Synology Drive 安全漏洞 — Synology Drive Client CWE-829 | 7.8 | High | 2024-09-26 |
| CVE-2022-49037 | Synology Drive 日志信息泄露漏洞 — Synology Drive Client CWE-532 | 6.5 | Medium | 2024-09-26 |
| CVE-2023-52946 | Synology Drive 安全漏洞 — Synology Drive Client CWE-120 | 8.2 | High | 2024-09-26 |
| CVE-2024-39350 | Synology Camera Firmware 安全漏洞 — Camera Firmware CWE-290 | 7.5 | High | 2024-06-28 |
| CVE-2024-39348 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) CWE-494 | 7.5 | High | 2024-06-28 |
| CVE-2024-39347 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) CWE-276 | 5.9 | Medium | 2024-06-28 |
| CVE-2024-39352 | Synology Camera Firmware 安全漏洞 — Camera Firmware CWE-863 | 4.9 | Medium | 2024-06-28 |
| CVE-2024-39351 | Synology Camera Firmware 操作系统命令注入漏洞 — Camera Firmware CWE-78 | 7.2 | High | 2024-06-28 |
| CVE-2024-39349 | Synology Camera Firmware 安全漏洞 — Camera Firmware CWE-120 | 9.8 | Critical | 2024-06-28 |
| CVE-2023-47803 | Synology Camera Firmware 路径遍历漏洞 — Camera Firmware CWE-22 | 5.3 | Medium | 2024-06-28 |
| CVE-2023-47802 | Synology Camera Firmware 操作系统命令注入漏洞 — Camera Firmware CWE-78 | 7.2 | High | 2024-06-28 |
| CVE-2024-5463 | Synology Camera Firmware 安全漏洞 — Camera Firmware CWE-120 | 6.5 | Medium | 2024-06-04 |
| CVE-2024-29241 | Synology Surveillance Station 安全漏洞 — Surveillance Station CWE-862 | 9.9 | Critical | 2024-03-28 |
| CVE-2024-29240 | Synology Surveillance Station 安全漏洞 — Surveillance Station CWE-862 | 4.3 | Medium | 2024-03-28 |
| CVE-2024-29239 | Synology Surveillance Station SQL注入漏洞 — Surveillance Station CWE-89 | 5.4 | Medium | 2024-03-28 |
This page lists every published CVE security advisory associated with Synology. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.