CVE-2010-2453

N/A

Published: September 29, 2010 at 04:00 PM UTC

Updated: June 16, 2026 at 11:20 PM UTC

13 products affected across 1 vendorDsmDisk Station Ds1010+Disk Station Ds110J

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.9%

Description

Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Dsm · Synology

95%

2.2-1041 2.2-1042 2.2-1045 2.2-942 2.3-1139 2.3-1141 2.3-1144 2.3-1157 2.3-1161 3.0-1334

synology-disk-station-ds1010 (environment) · synology-disk-station-ds109 (environment) · synology-disk-station-ds110 (environment) · synology-disk-station-ds110j (environment) · synology-disk-station-ds209 (environment) · synology-disk-station-ds210 (environment) · synology-disk-station-ds210j (environment) · synology-disk-station-ds409slim (environment) · synology-disk-station-ds410 (environment) · synology-disk-station-ds410j (environment) · synology-disk-station-ds411 (environment) · synology-disk-station-ds710 (environment)

Disk Station Ds1010+· Synologydevice

80%

All versions

Disk Station Ds109 · Synologydevice

80%

All versions

Disk Station Ds110+· Synologydevice

80%

All versions

Disk Station Ds110J · Synologydevice

80%

All versions