synology vs960hd firmware

Name: synology vs960hd firmware
Brand: synology

productUS

cpe:2.3:o:synology:vs960hd_firmware:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical14high6medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-3156US	high7.8OT critical	100.0% (100th)	KEV	no fix	2021-01-26	—
CVE-2017-5753US	medium5.6	93.8% (100th)	Exploit	no fix	2018-01-04	—
CVE-2018-1160US	critical9.8	86.5% (100th)	Exploit	no fix	2018-12-20	—
CVE-2019-9511US	high7.5	59.5% (99th)	Exploit	no fix	2019-08-13	—
CVE-2019-9515US	high7.5	87.3% (100th)	—	no fix	2019-08-13	—
CVE-2019-9514US	high7.5	82.8% (100th)	—	no fix	2019-08-13	—
CVE-2019-9513US	high7.5	81.6% (100th)	—	no fix	2019-08-13	—
CVE-2019-9516US	medium6.5	56.3% (99th)	—	no fix	2019-08-13	—
CVE-2019-9517US	high7.5	27.9% (98th)	—	no fix	2019-08-13	—
CVE-2019-9518US	high7.5	25.4% (98th)	—	no fix	2019-08-13	—
CVE-2018-7185US	high7.5	9.00% (95th)	—	2.2.3-1505	2018-03-06	< 2.2.3-1505
CVE-2018-7184US	high7.5	8.63% (95th)	—	no fix	2018-03-06	—
CVE-2018-7170US	medium5.3	2.69% (86th)	—	2.2.3-1505	2018-03-06	< 2.2.3-1505
CVE-2021-26561US	high8.1	2.06% (81st)	—	no fix	2021-02-26	—
CVE-2021-26562US	high8.1	1.90% (80th)	—	no fix	2021-02-26	—
CVE-2021-26566US	critical9.0	1.51% (74th)	—	no fix	2021-02-26	—
CVE-2021-26567US	high7.8	1.13% (66th)	—	no fix	2021-02-26	—
CVE-2021-26560US	high7.4OT elevated	0.77% (55th)	—	no fix	2021-02-26	—
CVE-2021-26565US	medium5.9OT elevated	0.74% (54th)	—	no fix	2021-02-26	—
CVE-2021-26564US	high8.7OT elevated	0.67% (52nd)	—	no fix	2021-02-26	—
CVE-2019-3870US	medium6.1OT elevated	0.55% (46th)	—	2.3.6-1720	2019-04-09	< 2.3.6-1720
CVE-2021-26563US	medium6.7OT elevated	0.51% (44th)	—	no fix	2021-02-26	—

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-770Allocation of Resources Without Limits or Throttling6 CVEs
CWE-319Cleartext Transmission of Sensitive Information3 CVEs
CWE-787Out-of-bounds Write3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.