CVE-2018-13280: Synology Diskstation Manager

Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days.

Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.

Affected products

• Synology Diskstation Manager: before 6.2-23739 (fixed in 6.2-23739)

Published 2018-07-30. Last modified 2026-06-17.