Synology Directory Server vulnerabilities

4 CVEs affecting Synology Directory Server, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-1472, published 2020-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-1472: Microsoft Netlogon Privilege Escalation Vulnerability, published 2020-08-17. Medium severity, CVSS 5.5. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 99.4% chance of exploitation in the next 30 days. An elevation of privilege vulnerability exists when an attacker establishes a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol (MS-NRPC). An…
CVE-2019-14907, published 2020-01-21. Medium severity, CVSS 6.5. EPSS: 3.2% chance of exploitation in the next 30 days. All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained from the client, after…
CVE-2019-19344, published 2020-01-21. Medium severity, CVSS 6.5. EPSS: 2.8% chance of exploitation in the next 30 days. There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to a call to realloc()…
CVE-2019-3870, published 2019-04-09. Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2. During the creation of a new Samba AD DC, files are created in a private subdirectory of the…