- Description
- Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via unspecified vectors.
- Source
- security@synology.com
- NVD status
- Analyzed
- Products
- beestation_os, diskstation_manager
CVSS 3.1
- Type
- Primary
- Base score
- 5.3
- Impact score
- 1.4
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- Severity
- MEDIUM
- security@synology.com
- CWE-295
- Hype score
- Not currently trending
Synology warns of active C3RB3R ransomware wave targeting outdated DSM. Exploits CVE-2024-10441 RCE, CVE-2024-50629 file read, CVE-2024-10445 file write patched Dec 2024. Shadowserver tracks 380k+ internet-exposed NAS. https://t.co/BWOBlOIql5
@ManiarViral
3 Nov 2026
79 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Synology warns C3RB3R ransomware is hitting unpatched NAS via DSM bugs fixed in 2024 (CVE-2024-10441, CVE-2024-50629, CVE-2024-10445), adding .L0CK3D to files. Shadowserver sees ~380k exposed devices. Source: BleepingComputer https://t.co/nDwNHMQ8mT
@DuckButTurttle
2 Nov 2026
78 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Synology NAS gear is being hit with C3RB3R ransomware by weaponizing old 2024 exploits like CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445. Even patched versions are being targeted—users must update DSM, clamp down on SSH, use VPNs, enforce 2FA, and maintain offline backups
@dailytechonx
2 Nov 2026
51 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10445 Improper certificate validation vulnerability in the update functionality in Synology BeeStation Manager (BSM) before 1.1-65374, Synology DiskStation Manager (DSM) be… https://t.co/Gb5Z8RJleg
@CVEnew
19 Mar 2025
488 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0:-:*:*:*:*:*:*",
"matchCriteriaId": "F498216A-5ABD-4DCB-A149-F4D41D9022E5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0:65145:*:*:*:*:*:*",
"matchCriteriaId": "1006E9A9-86FB-4580-8278-8865B1646A00",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0:65149:*:*:*:*:*:*",
"matchCriteriaId": "254081F3-13E2-40ED-A543-11DA03CEA508",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0:65162:*:*:*:*:*:*",
"matchCriteriaId": "41B53AE7-424C-49F5-8F99-3FDA8FCC6D05",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0.1:65210:*:*:*:*:*:*",
"matchCriteriaId": "DF7FFADA-CEB5-4869-9B38-8C58CE4FE673",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0.2:65233:*:*:*:*:*:*",
"matchCriteriaId": "312D9B7F-DFE1-403E-B78B-5F79423F4E2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.0.2:65235:*:*:*:*:*:*",
"matchCriteriaId": "12C2383E-4C52-4A8B-8540-597E307C80BD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.1:-:*:*:*:*:*:*",
"matchCriteriaId": "E6960C0C-01BF-437C-931A-6375ED673513",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:beestation_os:1.1:65373:*:*:*:*:*:*",
"matchCriteriaId": "327C73CB-CE4C-4909-95E4-0423E47B175D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A6B07D3-6D9D-4DE6-896F-39B059093AB6",
"versionEndExcluding": "6.2.4-25556-8",
"versionStartIncluding": "6.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "3A7DC498-96F4-4BD4-BC5F-A6F44D4240AB",
"versionEndExcluding": "7.2-64570-4",
"versionStartIncluding": "7.2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "265810D3-F94D-4023-B53C-F82E32B9A451",
"versionEndExcluding": "7.2.1-69057-6",
"versionStartIncluding": "7.2.1-69057",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B1205204-6FAC-4211-9AAA-1998A106AF9F",
"versionEndExcluding": "7.2.2-72806-1",
"versionStartIncluding": "7.2.2",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]