VDB

GCVE-110-CERTCC-2013-615910

GCVE-110-CERTCC-2013-615910
Advisory PublishedCVSS 10.0/10
Vulnetix · Advisory published January 7, 2014
Synology DiskStation Manager versions 4.3-3776-3 and below contain a vulnerability that allows a remote unauthenticated user to append arbitrary data to an arbitrary file under root privileges.
Download JSON Open in Console

Risk Scores

CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score7.8remediation_levelOFreport_confidenceCenvironmental_score2.010780107296target_distributionLenvironmental_vectorCDP:L/TD:L/CR:ND/IR:ND/AR:ND

Aliases

CVE-2013-6955

Transitive aliases

VAR-201401-0159GHSA-cf8x-55vw-78gpGSD-2013-6955

References

Synology DiskStation Manager arbitrary file modification
url
Synology DiskStation Manager arbitrary file modification
url
Synology DiskStation Manager arbitrary file modification
advisory

Browse GCVE Records

73,161 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›