Vulnerabilities > Synology > Download Station > 3.8.15.3563

DATE CVE VULNERABILITY TITLE RISK
2021-06-18 CVE-2021-34809 Unspecified vulnerability in Synology Download Station
Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.
network
low complexity
synology
8.8
2021-06-18 CVE-2021-34810 Unspecified vulnerability in Synology Download Station
Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.
network
low complexity
synology
8.8
2021-06-18 CVE-2021-34811 Unspecified vulnerability in Synology Download Station
Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.
network
low complexity
synology
4.3