Synology warns of C3RB3R ransomware attacks on NAS devices
C3RB3R ransomware exploits unpatched DSM vulnerabilities to encrypt data on Synology NAS devices; users urged to update immediately.
75
Vulnerability1 · 1 read
CVE-2024-10445
- CVSS 3.1
- 5.3 medium
- EPSS
- <1%p30
- Published
- ·
- Modified
Description · NVD
Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via unspecified vectors.
- Vendors
- synology
- Products
- beestation os, diskstation manager
- Weakness
- CWE-295
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
In the news
2 storiesSynology NAS hit by C3RB3R ransomware using 2024 flaws
C3RB3R ransomware encrypts files with .L0CK3D extension on Synology DSM devices after exploitation of 2024 vulnerabilities
50