Test ID:	1.3.6.1.4.1.25623.1.0.171235
Category:	Web application abuses
Title:	Synology DiskStation Manager (DSM) Multiple Vulnerabilities (Synology-SA-25:01, Synology-SA-25:03) - Unreliable Remote Version Check
Summary:	Synology DiskStation Manager (DSM) is prone to multiple; vulnerabilities.
Description:	Summary: Synology DiskStation Manager (DSM) is prone to multiple vulnerabilities. Vulnerability Impact: - CVE-2024-10444 / Synology-SA-25:01: A vulnerability allows man-in-the-middle attackers to hijack the authentication of administrators via unspecified vectors. - CVE-2025-1021 / Synology-SA-25:03: A vulnerability allows attackers to read any file via writable Network File System (NFS) service. Affected Software/OS: Synology DSM prior to version 7.1.1-42962-8, 7.2.x prior to 7.2.1-69057-7 and 7.2.2 prior to 7.2.2-72806-3. Solution: Update to version 7.1.1-42962-8, 7.2.1-69057-7, 7.2.2-72806-3 or later. CVSS Score: 8.5 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-10444 Common Vulnerability Exposure (CVE) ID: CVE-2025-1021
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.