Synology Inc. Surveillance Station

Name: Synology Inc. Surveillance Station
Brand: Synology Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical0high2medium0low

updated 2026-10-28

vulnerabilities (4)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-38687US	critical9.8	1.32% (71st)	—	no fix	2021-12-29	5 versions
CVE-2024-29241US	critical9.9OT elevated	0.76% (55th)	—	no fix	2024-03-28	2 versions
CVE-2023-52944US	medium4.3OT elevated	0.40% (34th)	—	no fix	2024-12-04	2 versions
CVE-2023-52943US	medium4.3OT elevated	0.40% (34th)	—	no fix	2024-12-04	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-863Incorrect Authorization3 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')1 CVEs
CWE-121Stack-based Buffer Overflow1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.