[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3QchKs-iG2ecM3D9e2siEP1URPhwDaLHM5lwnfhM-LU":3,"g5a-family:synology\u002Fdiskstation_manager_unified_controller":110,"g5a-ex:synology\u002Fdiskstation_manager_unified_controller@*":111},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":83,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"synology","diskstation_manager_unified_controller",3,17,1,"2023-06-13",[14,17,22],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"3.0",9,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"3.1",2,0,false,{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},"3.1-23033","Diskstation Manager Unified Controller by Synology is a technology product with 3 tracked versions and 17 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":20,"kev_count":20,"has_kev":21},[30,38,45,50,55,59,64,69,73,77],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,"v3.1","High",0.99962,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":21,"epssScore":44},"CVE-2022-22687","Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.","2022-03-25",9.8,"Critical",0.02432,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":16,"cvssVersion":35,"severity":43,"isKev":21,"epssScore":49},"CVE-2021-26561","Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.","2021-02-26",0.02061,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":21,"epssScore":54},"CVE-2021-27649","Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.","2021-06-23",0.02007,{"cveId":56,"description":57,"publishedDate":48,"cvssScore":16,"cvssVersion":35,"severity":43,"isKev":21,"epssScore":58},"CVE-2021-26562","Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.",0.01898,{"cveId":60,"description":61,"publishedDate":48,"cvssScore":62,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":63},"CVE-2021-26566","Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic.",8.3,0.01508,{"cveId":65,"description":66,"publishedDate":53,"cvssScore":67,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":68},"CVE-2021-29087","Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors.",7.5,0.01396,{"cveId":70,"description":71,"publishedDate":53,"cvssScore":67,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":72},"CVE-2021-29084","Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.",0.01332,{"cveId":74,"description":75,"publishedDate":53,"cvssScore":76,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":72},"CVE-2021-29085","Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.",8.6,{"cveId":78,"description":79,"publishedDate":53,"cvssScore":80,"cvssVersion":35,"severity":81,"isKev":21,"epssScore":82},"CVE-2021-29086","Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecified vectors.",5.3,"Medium",0.01181,[84],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"severity":36,"isKev":4,"epssScore":37,"cisaVulnName":85,"cisaDateAdded":86,"cisaShortDescription":87,"cisaRequiredAction":88},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Diskstation Manager Unified Controller by Synology - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Diskstation Manager Unified Controller by Synology covering 3 versions with 17 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Diskstation Manager Unified Controller vulnerabilities, Diskstation Manager Unified Controller security, Diskstation Manager Unified Controller CVE, Synology Diskstation Manager Unified Controller, Diskstation Manager Unified Controller threat intelligence, Synology security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Diskstation Manager Unified Controller KEV, Diskstation Manager Unified Controller exploited vulnerabilities",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Diskstation Manager Unified Controller","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsynology\u002Fdiskstation_manager_unified_controller",{"@type":99,"name":100,"url":101},"Organization","Synology","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsynology","Security Software","3 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Diskstation Manager Unified Controller Security Vulnerabilities","Security vulnerabilities affecting Diskstation Manager Unified Controller by Synology",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":15},"2026-10-28T21:02:12.342Z",[],{"rows":112,"total":11,"capped":21,"failed":20},[113],{"cveId":31,"name":85,"severity":36,"cvss":34,"added":86,"epss":37,"published":114,"ranges":115,"checked":4,"hits":116,"covers":21},"2021-01-26T21:15:12.987",[15],[]]