Synology warns ransomware hits NAS devices on outdated DSM
Original title: Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions
Attackers exploit a flaw patched in December 2024; Synology has not said which of three CVEs is used.
Synology said in an October 29, 2026 notice that attackers are exploiting a vulnerability patched in December 2024 against NAS devices still running outdated DiskStation Manager. The attacks encrypt data and seek ransom. The notice points to advisory Synology-SA-24:20, which covers CVE-2024-10441, CVE-2024-50629 and CVE-2024-10445, but does not say which flaw is in use. Synology urges immediate DSM updates and automatic updates.
Unconfirmed: Synology has not confirmed which of the three CVEs in Synology-SA-24:20 is being exploited.
- CVE-2024-10441 is rated CVSS 9.8 and could allow remote code execution in the system plugin daemon.
- CVE-2024-50629 is rated 5.3 and could allow limited remote file reads.
- CVE-2024-10445 is rated 4.3 and involves improper certificate validation in updates.
- Fixes were issued for DSM 7.2.2, 7.2.1, 7.2, 7.1 and 6.2; users should match the advisory build.
Impact: Encryption of NAS data and ransom extortion
| Product | Affected | Fixed in |
|---|---|---|
| Synology DiskStation Manager | outdated DSM versions vulnerable to a flaw patched in December 2024 | updates for DSM 7.2.2, 7.2.1, 7.2, 7.1 and 6.2 |
- 1.Update vulnerable DSM installations immediately to the fixed build in Synology-SA-24:20.
- 2.Enable automatic DSM updates.
- Vendors
- Synology
- Products
- DiskStation Manager
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2024-10441+2 related CVEs | Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation… | 9.8 group max | 1% |
From the original article
2 min read at securityaffairs.comSynology warns of ransomware attacks exploiting a 2024 flaw in outdated NAS devices, urging users to update DSM immediately. A security fix released in 2024 is now at the centre of ransomware attacks against Synology NAS devices. The company has found attackers targeting systems that still run outdated versions of DiskStation Manager (DSM), putting files […]
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.