CVE-2017-12076: Synology Diskstation Manager

Medium severity, CVSS 4.9. EPSS: 1.4% chance of exploitation in the next 30 days.

Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM) before 6.1.1-15088 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack.

Affected products

• Synology Diskstation Manager: up to and including 6.1; version 6.1.1 only

Published 2017-08-28. Last modified 2026-06-17.