Description
Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A remote network attacker can gain privileged access to a vulnerable device.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | NAS server DS107 | 3.1-1639 – ≤ 3.1-1639 | — |
| Synology | NAS server DS116 | 5.2-5644-1 – < 5.2-5644-1 | 5.2-5644-1 |
| Synology | NAS server DS213 | 5.2-5644-1 – < 5.2-5644-1 | 5.2-5644-1 |
References
- https://www.synology.com/en-global/releaseNote/DS213
- 93805 vdb-entry
- VU#404187 third-party-advisory