Advisories · Technology

Synology Unified Controller (DSMUC).

Every CVE that names Synology Unified Controller (DSMUC) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-5401 CVE record

CVSS 4.3 Medium

Synology DiskStation Manager (DSM): Improper control of dynamically-managed code resources vulnerability in WebAPI component…
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
- CWE-913
Not analysed yet 4 Dec 2025
CVE-2024-45539 CVE record

CVSS 7.5 High

Out-of-bounds write in Synology DiskStation Manager (DSM) and others
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
- Memory corruption
Not analysed yet 4 Dec 2025
CVE-2024-45538 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Cross-site request forgery in Synology DiskStation Manager (DSM) and others
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
- Cross-site request forgery (CSRF)
Not analysed yet 4 Dec 2025
CVE-2024-10442 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Off-by-one error in Synology Unified Controller (DSMUC) and others
- Synology Unified Controller (DSMUC)
- Synology Replication Service
- CWE-193
Not analysed yet 19 Mar 2025
CVE-2023-2729 CVE record

CVSS 5.9 Medium

Synology DiskStation Manager (DSM): Use of insufficiently random values vulnerability in User Management Functionality in…
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
Not analysed yet 13 Jun 2023
CVE-2023-0142 CVE record

CVSS 6.5 Medium

Uncontrolled search path in Synology DiskStation Manager (DSM) and others
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
- CWE-427
Not analysed yet 13 Jun 2023