10

CVE-2016-6554

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A remote network attacker can gain privileged access to a vulnerable device.

Data is provided by the National Vulnerability Database (NVD)
Synology ≫ Ds107 Firmware Version <= 3.1-1639
   Synology ≫ Ds107 Version-
Synology ≫ Ds213 Firmware Version <= 5.2-5644-1
   Synology ≫ Ds213 Version-
Synology ≫ Ds116 Firmware Version <= 5.2-5644-1
   Synology ≫ Ds116 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.83% 0.821
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
https://www.kb.cert.org/vuls/id/404187
Third Party Advisory
US Government Resource
https://www.securityfocus.com/bid/93805
Third Party Advisory
VDB Entry