Diskstation Manager Unified Controller
Vendor:
First CVE: Jan 26, 2021 · Active for 5 years
21
Total CVEs
More Total CVEs than 94% of tracked products
5.3
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
8.1
Avg CVSS
Higher Avg CVSS than 71% of tracked products
4.8%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Diskstation Manager Unified Controller over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 26, 2021
5 years ago
Most Recent CVE
Dec 4, 2025
234 days ago
CVE Severity & Scoring
Diskstation Manager Unified Controller21 CVEs
10%
67%
24%
All CVEs352,719 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local3 (14.3%)
Network18 (85.7%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low15 (71.4%)
High6 (28.6%)
Unknown0 (0.0%)
User Interaction
None20 (95.2%)
Unknown0 (0.0%)
Required1 (4.8%)
Privileges Required
Low4 (19.0%)
High1 (4.8%)
None16 (76.2%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (21 CVEs).
21 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-3156HIGH Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg | Jan 26, 2021 | 7.8 | 99 | YES | YES |
CVE-2024-10442CRITICAL Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC) b | Mar 19, 2025 | 10.0 | 33 | NO | NO |
CVE-2024-45538CRITICAL Cross-Site Request Forgery (CSRF) vulnerability in WebAPI Framework in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMU | Dec 4, 2025 | 9.6 | 31 | NO | NO |
CVE-2022-22687CRITICAL Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allo | Mar 25, 2022 | 9.8 | 31 | NO | NO |
CVE-2021-27649CRITICAL Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via un | Jun 23, 2021 | 9.8 | 28 | NO | NO |
CVE-2024-5401HIGH Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-7280 | Dec 4, 2025 | 8.8 | 27 | NO | NO |
CVE-2021-26566CRITICAL Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execu | Feb 26, 2021 | 9.0 | 27 | NO | NO |
CVE-2021-26564HIGH Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof s | Feb 26, 2021 | 8.7 | 27 | NO | NO |
CVE-2024-45539HIGH Out-of-bounds write vulnerability in cgi components in Synology DiskStation Manager (DSM) before 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4- | Dec 4, 2025 | 7.5 | 26 | NO | NO |
CVE-2023-2729HIGH Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user cre | Jun 13, 2023 | 7.5 | 25 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (21 CVEs).
CISA KEV
1 CVE
4.8% of CVEs· 97th percentile
Metasploit
1 CVE
4.8% of CVEs· 96th percentile
Nuclei
1 CVE
4.8% of CVEs· 97th percentile
ExploitDB
1 CVE
4.8% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (21 CVEs).
Media Mentions
Signals from CVEs in this product scope (21 CVEs).
Top CNAs Publishing CVEs For Diskstation Manager Unified Controller
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.1 | 2 | 7.8 | 0.9% | 0 | 0 |
| 3.0 | 9 | 7.7 | 12.0% | 1 | 1 |