CVE-2010-3684

Published: Sep 29, 2010Modified: Apr 29, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.

Affected (9)

Products: Synology: Dsm

Synology

1 product

Dsm

Configuration A

9 vulnerable · 12 platform

Vulnerable Software	Affected Versions
Synology Dsm	Version 2.2-0942
Synology Dsm	Version 2.2-1041
Synology Dsm	Version 2.2-1042
Synology Dsm	Version 2.2-1045
Synology Dsm	Version 2.3-1139
Synology Dsm	Version 2.3-1141
Synology Dsm	Version 2.3-1144
Synology Dsm	Version 2.3-1157
Synology Dsm	Version 2.3-1161

Running on/with	Platform Versions
Synology Disk Station Ds1010+	All versions
Synology Disk Station Ds109	All versions
Synology Disk Station Ds110+	All versions
Synology Disk Station Ds110j	All versions
Synology Disk Station Ds209	All versions
Synology Disk Station Ds210+	All versions
Synology Disk Station Ds210j	All versions
Synology Disk Station Ds409slim	All versions
Synology Disk Station Ds410	All versions
Synology Disk Station Ds410j	All versions
Synology Disk Station Ds411+	All versions
Synology Disk Station Ds710+	All versions

Related CWEs

CWE-255

References (2)

http://www.securityfocus.com/archive/1/513970/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/513970/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.