CVE-2018-13291: Synology Diskstation Manager

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology DiskStation Manager (DSM) before 6.2.1-23824 allows remote authenticated users to obtain sensitive information via the world readable configuration.

Affected products

• Synology Diskstation Manager: from 5.2, before 6.2.1-23824 (fixed in 6.2.1-23824)

Published 2019-04-01. Last modified 2026-06-17.