Description (CNA)
Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A remote network attacker can gain privileged access to a vulnerable device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / NAS server DS107 | affected 3.1-1639 through 3.1-1639 |
| Synology / NAS server DS116 | affected 5.2-5644-1 before 5.2-5644-1 |
| Synology / NAS server DS213 | affected 5.2-5644-1 before 5.2-5644-1 |
CWE
CWE-255
References
- https://www.synology.com/en-global/releaseNote/DS213
- https://www.securityfocus.com/bid/93805
- https://www.kb.cert.org/vuls/id/404187
ADP enrichment
No English description supplied.