Lucene search
HistorySep 29, 2010 - 5:00 p.m.
CVE-2010-3684
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.6%
The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.
Affected configurations
Node
synologydsmMatch2.2-0942
ORsynologydsmMatch2.2-1041
ORsynologydsmMatch2.2-1042
ORsynologydsmMatch2.2-1045
ORsynologydsmMatch2.3-1139
ORsynologydsmMatch2.3-1141
ORsynologydsmMatch2.3-1144
ORsynologydsmMatch2.3-1157
ORsynologydsmMatch2.3-1161
synologydisk_station_ds1010\+
ORsynologydisk_station_ds109
ORsynologydisk_station_ds110\+
ORsynologydisk_station_ds110j
ORsynologydisk_station_ds209
ORsynologydisk_station_ds210\+
ORsynologydisk_station_ds210j
ORsynologydisk_station_ds409slim
ORsynologydisk_station_ds410
ORsynologydisk_station_ds410j
ORsynologydisk_station_ds411\+
ORsynologydisk_station_ds710\+
Related
cvelist
cvelist
CVE-2010-3684
2010-09-29 16:00:00
CVE-2010-2453
2010-09-29 16:00:00
cve
cve
CVE-2010-3684
2010-09-29 17:00:05
CVE-2010-2453
2010-09-29 17:00:02
prion
prion
Code injection
2010-09-29 17:00:00
Cross site scripting
2010-09-29 17:00:00
nvd
nvd
CVE-2010-2453
2010-09-29 17:00:02
securityvulns
securityvulns
Web commands injection through FTP Login in Synology Disk Station - CVE-2010-2453
2010-09-29 00:00:00
Synology Disk Station crossite scripting
2010-09-29 00:00:00
packetstorm
packetstorm
checkpoint_advisories
checkpoint_advisories
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.6%
Related for NVD:CVE-2010-3684