Known vulnerabilities in TC500

Vendor: Synology Inc.
Software: TC500
Software CPE: cpe:2.3:h:synology:tc500:*:*:*:*:*:*:*:*
Website: https://www.synology.com/
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting TC500 TC500 is affected by 7 known vulnerabilities: 2 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU107380 - Out-of-bounds read
CVE-2024-11131		 CWE-125 High
No
No
 1.2.0-0525 11.04.2025 SB2025041111
#VU93662 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47802		 CWE-78 Low
No
No
 1.0.7-0298 02.07.2024 SB2024070288
#VU93661 - Memory corruption
CVE-2024-39349		 CWE-119 High
No
No
 1.0.7-0298 02.07.2024 SB2024070288
#VU93660 - Improper Authentication
CVE-2024-39350		 CWE-287 Low
No
No
 1.0.7-0298 02.07.2024 SB2024070288
#VU93659 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-47803		 CWE-22 Medium
No
No
 1.0.7-0298 02.07.2024 SB2024070288
#VU93658 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-39351		 CWE-78 Low
No
No
 1.0.7-0298 02.07.2024 SB2024070288
#VU93431 - Improper Authorization
CVE-2024-39352		 CWE-285 Medium
No
No
 1.0.7-0298 27.06.2024 SB2024070288