# Synology vulnerabilities > Synology has 293 published vulnerabilities across 92 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Diskstation Manager, with 110. If you run Synology software, patch the exploited flaws first. Canonical page: https://www.precursorintelligence.com/vendors/synology ## At a glance - **Published vulnerabilities:** 293 - **Known to be exploited:** 2 - **Products:** 92 - **Versions:** 1,494 - **Most recently added to the known-exploited list:** [CVE-2021-3156](https://www.precursorintelligence.com/what-is/cve-2021-3156), 6 April 2022. We keep watching the list. ## Which Synology products have the most vulnerabilities? - [Diskstation Manager](https://www.precursorintelligence.com/product/synology/diskstation_manager): 110 published vulnerabilities, 157 versions - [Router Manager](https://www.precursorintelligence.com/product/synology/router_manager): 54 published vulnerabilities, 68 versions - [Photo Station](https://www.precursorintelligence.com/product/synology/photo_station): 33 published vulnerabilities, 56 versions - [Skynas](https://www.precursorintelligence.com/product/synology/skynas): 29 published vulnerabilities, 1 version - [Vs960hd Firmware](https://www.precursorintelligence.com/product/synology/vs960hd_firmware): 22 published vulnerabilities, 2 versions - [Vs960hd](https://www.precursorintelligence.com/product/synology/vs960hd): 22 published vulnerabilities, 0 versions - [Surveillance Station](https://www.precursorintelligence.com/product/synology/surveillance_station): 17 published vulnerabilities, 57 versions - [Diskstation Manager Unified Controller](https://www.precursorintelligence.com/product/synology/diskstation_manager_unified_controller): 17 published vulnerabilities, 3 versions - [Skynas Firmware](https://www.precursorintelligence.com/product/synology/skynas_firmware): 13 published vulnerabilities, 1 version - [Calendar](https://www.precursorintelligence.com/product/synology/calendar): 11 published vulnerabilities, 16 versions Each product page lists its own known-exploited flaws. ## Which Synology vulnerabilities are being exploited? 2 flaws are on the government list of vulnerabilities known to be exploited, newest first: - [CVE-2021-3156](https://www.precursorintelligence.com/what-is/cve-2021-3156): Sudo Heap-Based Buffer Overflow Vulnerability. High, CVSS 7.8, chance of use in 30 days >99%, known exploited since 6 April 2022. - [CVE-2020-1472](https://www.precursorintelligence.com/what-is/cve-2020-1472): Microsoft Netlogon Privilege Escalation Vulnerability. Medium, CVSS 5.5, chance of use in 30 days >99%, known exploited since 3 November 2021. ## Which Synology flaws are most likely to be used? Ranked by the latest exploit-likelihood forecast (the chance each flaw is used in an attack in the next 30 days): - [CVE-2021-3156](https://www.precursorintelligence.com/what-is/cve-2021-3156): >99%, High (CVSS 7.8), known exploited - [CVE-2020-1472](https://www.precursorintelligence.com/what-is/cve-2020-1472): >99%, Medium (CVSS 5.5), known exploited - [CVE-2017-5753](https://www.precursorintelligence.com/what-is/cve-2017-5753): 94%, Medium (CVSS 5.6) - [CVE-2019-9515](https://www.precursorintelligence.com/what-is/cve-2019-9515): 87%, High (CVSS 7.5) - [CVE-2018-1160](https://www.precursorintelligence.com/what-is/cve-2018-1160): 87%, Critical (CVSS 9.8) - [CVE-2017-14491](https://www.precursorintelligence.com/what-is/cve-2017-14491): 85%, Critical (CVSS 9.8) - [CVE-2013-6955](https://www.precursorintelligence.com/what-is/cve-2013-6955): 85%, Critical (CVSS 10.0) - [CVE-2019-9514](https://www.precursorintelligence.com/what-is/cve-2019-9514): 83%, High (CVSS 7.5) - [CVE-2019-9513](https://www.precursorintelligence.com/what-is/cve-2019-9513): 82%, High (CVSS 7.5) - [CVE-2017-9554](https://www.precursorintelligence.com/what-is/cve-2017-9554): 77%, Medium (CVSS 5.3) ## All Synology products we track 62 products with at least one tracked version, most vulnerabilities first: - [Diskstation Manager](https://www.precursorintelligence.com/product/synology/diskstation_manager): 110 vulnerabilities, 157 versions - [Router Manager](https://www.precursorintelligence.com/product/synology/router_manager): 54 vulnerabilities, 68 versions - [Photo Station](https://www.precursorintelligence.com/product/synology/photo_station): 33 vulnerabilities, 56 versions - [Skynas](https://www.precursorintelligence.com/product/synology/skynas): 29 vulnerabilities, 1 version - [Vs960hd Firmware](https://www.precursorintelligence.com/product/synology/vs960hd_firmware): 22 vulnerabilities, 2 versions - [Surveillance Station](https://www.precursorintelligence.com/product/synology/surveillance_station): 17 vulnerabilities, 57 versions - [Diskstation Manager Unified Controller](https://www.precursorintelligence.com/product/synology/diskstation_manager_unified_controller): 17 vulnerabilities, 3 versions - [Skynas Firmware](https://www.precursorintelligence.com/product/synology/skynas_firmware): 13 vulnerabilities, 1 version - [Calendar](https://www.precursorintelligence.com/product/synology/calendar): 11 vulnerabilities, 16 versions - [Download Station](https://www.precursorintelligence.com/product/synology/download_station): 8 vulnerabilities, 34 versions - [Tc500 Firmware](https://www.precursorintelligence.com/product/synology/tc500_firmware): 7 vulnerabilities, 11 versions - [Bc500 Firmware](https://www.precursorintelligence.com/product/synology/bc500_firmware): 7 vulnerabilities, 10 versions - [Drive Client](https://www.precursorintelligence.com/product/synology/drive_client): 6 vulnerabilities, 33 versions - [Video Station](https://www.precursorintelligence.com/product/synology/video_station): 6 vulnerabilities, 51 versions - [DNS Server](https://www.precursorintelligence.com/product/synology/dns_server): 5 vulnerabilities, 45 versions - [Note Station](https://www.precursorintelligence.com/product/synology/note_station): 5 vulnerabilities, 23 versions - [Media Server](https://www.precursorintelligence.com/product/synology/media_server): 5 vulnerabilities, 52 versions - [Directory Server](https://www.precursorintelligence.com/product/synology/directory_server): 4 vulnerabilities, 5 versions - [Radius Server](https://www.precursorintelligence.com/product/synology/radius_server): 4 vulnerabilities, 1 version - [Drive Server](https://www.precursorintelligence.com/product/synology/drive_server): 4 vulnerabilities, 43 versions - [Active Backup for Business Agent](https://www.precursorintelligence.com/product/synology/active_backup_for_business_agent): 4 vulnerabilities, 27 versions - [Audio Station](https://www.precursorintelligence.com/product/synology/audio_station): 4 vulnerabilities, 31 versions - [Mailplus Server](https://www.precursorintelligence.com/product/synology/mailplus_server): 3 vulnerabilities, 22 versions - [Chat](https://www.precursorintelligence.com/product/synology/chat): 3 vulnerabilities, 9 versions - [File Station](https://www.precursorintelligence.com/product/synology/file_station): 3 vulnerabilities, 22 versions - [Office](https://www.precursorintelligence.com/product/synology/office): 3 vulnerabilities, 25 versions - [Carddav Server](https://www.precursorintelligence.com/product/synology/carddav_server): 3 vulnerabilities, 14 versions - [SSL VPN Client](https://www.precursorintelligence.com/product/synology/ssl_vpn_client): 3 vulnerabilities, 30 versions - [Virtual Diskstation Manager](https://www.precursorintelligence.com/product/synology/virtual_diskstation_manager): 3 vulnerabilities, 1 version - [Safeaccess](https://www.precursorintelligence.com/product/synology/safeaccess): 2 vulnerabilities, 1 version - [Presto File Server](https://www.precursorintelligence.com/product/synology/presto_file_server): 2 vulnerabilities, 15 versions - [Application Service](https://www.precursorintelligence.com/product/synology/application_service): 2 vulnerabilities, 15 versions - [Dsm](https://www.precursorintelligence.com/product/synology/dsm): 2 vulnerabilities, 10 versions - [Moments](https://www.precursorintelligence.com/product/synology/moments): 2 vulnerabilities, 12 versions - [SSO Server](https://www.precursorintelligence.com/product/synology/sso_server): 2 vulnerabilities, 1 version - [Web Station](https://www.precursorintelligence.com/product/synology/web_station): 1 vulnerability, 1 version - [Active Backup for Microsoft 365](https://www.precursorintelligence.com/product/synology/active_backup_for_microsoft_365): 1 vulnerability, 41 versions - [Antivirus Essential](https://www.precursorintelligence.com/product/synology/antivirus_essential): 1 vulnerability, 25 versions - [Assistant](https://www.precursorintelligence.com/product/synology/assistant): 1 vulnerability, 27 versions - [Beephotos](https://www.precursorintelligence.com/product/synology/beephotos): 1 vulnerability, 11 versions - [Beestation OS](https://www.precursorintelligence.com/product/synology/beestation_os): 1 vulnerability, 5 versions - [Cloud Station](https://www.precursorintelligence.com/product/synology/cloud_station): 1 vulnerability, 13 versions - [Cloud Station Backup](https://www.precursorintelligence.com/product/synology/cloud_station_backup): 1 vulnerability, 16 versions - [Cloud Station Drive](https://www.precursorintelligence.com/product/synology/cloud_station_drive): 1 vulnerability, 42 versions - [Docker](https://www.precursorintelligence.com/product/synology/docker): 1 vulnerability, 1 version - [Ds107 Firmware](https://www.precursorintelligence.com/product/synology/ds107_firmware): 1 vulnerability, 9 versions - [Ds116 Firmware](https://www.precursorintelligence.com/product/synology/ds116_firmware): 1 vulnerability, 71 versions - [Ds213 Firmware](https://www.precursorintelligence.com/product/synology/ds213_firmware): 1 vulnerability, 140 versions - [Ds Audio](https://www.precursorintelligence.com/product/synology/ds_audio): 1 vulnerability, 1 version - [Ds File](https://www.precursorintelligence.com/product/synology/ds_file): 1 vulnerability, 1 version - Ds Photo+: 1 vulnerability, 1 version - [Mail Station](https://www.precursorintelligence.com/product/synology/mail_station): 1 vulnerability, 1 version - [Photos](https://www.precursorintelligence.com/product/synology/photos): 1 vulnerability, 38 versions - [Photo Station Uploader](https://www.precursorintelligence.com/product/synology/photo_station_uploader): 1 vulnerability, 14 versions - [Synology Photo Station](https://www.precursorintelligence.com/product/synology/synology_photo_station): 1 vulnerability, 1 version - [Universal Search](https://www.precursorintelligence.com/product/synology/universal_search): 1 vulnerability, 24 versions - [VPN Plus Server](https://www.precursorintelligence.com/product/synology/vpn_plus_server): 1 vulnerability, 1 version - [Replication Service](https://www.precursorintelligence.com/product/synology/replication_service): 0 vulnerabilities, 20 versions - [Mail Server](https://www.precursorintelligence.com/product/synology/mail_server): 0 vulnerabilities, 41 versions - [Beedrive](https://www.precursorintelligence.com/product/synology/beedrive): 0 vulnerabilities, 33 versions - [Drive](https://www.precursorintelligence.com/product/synology/drive): 0 vulnerabilities, 7 versions - [Cc400w Firmware](https://www.precursorintelligence.com/product/synology/cc400w_firmware): 0 vulnerabilities, 5 versions ## Questions ### How many vulnerabilities does Synology have? Our catalogue lists 293 published vulnerabilities across 92 products and 1,494 versions from Synology. The most recent Synology flaw added to the known-exploited list is CVE-2021-3156, on 6 April 2022. ### Which Synology vulnerabilities are being exploited? 2 Synology vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2021-3156 and CVE-2020-1472. The full list is on this page. ### Which Synology product has the most vulnerabilities? Diskstation Manager, with 110 published vulnerabilities. Its own page lists the ones known to be exploited. ### How do I get alerts for new Synology vulnerabilities? Create a Precursor Intelligence account and track the Synology products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook. ## Running Synology? Precursor Intelligence keeps checking for you: - **Tell us what you run.** Pick your software from a list, or let us work it out from your website. - **We match it to every flaw.** Over 400,000 published flaws, checked against your list. - **Ranked by real-world risk.** Every flaw gets a 0 to 100 risk score, kept up to date, led by evidence criminals are using it. - **Told as soon as we know.** An alert by email, in the app or by webhook to your own tools. Start free (no card, nothing to install): https://www.precursorintelligence.com/register Book a demo: https://www.precursorintelligence.com/contact