Synology Security Advisories SA-25:14 and SA-25:13 on Resolved Vulnerabilities

Synology, Inc. had published 2 security advisories on resolved vulnerabilities.

Synology-SA-25:14 DSM (PWN2OWN 2025)

Publish Time: 2025-11-19 10:52:25 UTC+8
Last Updated: 2025-11-19 10:58:29 UTC+8
Severity: Important
Status: Resolved

Abstract
Synology has released a security update for the DSM to address ZDI-CAN-28409 :

• • • CVE-2025-13392 allows remote attackers to bypass authentication with prior knowledge of the distinguished name (DN).

Please refer to the ‘Affected Products’ table for the corresponding updates.

Affected Products:

Mitigation: None

Detail

• CVE-2025-13392
  • Severity: Important
  • CVSS3 Base Score: 8.1
  • CVSS3 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  • CWE-754: Improper Check for Unusual or Exceptional Conditions
  • ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Acknowledgement
Le Trong Phuc (chanze@VRC) and Cao Ngoc Quy (Chino Kafuu)

Revision

Synology-SA-25:13 Synology Contacts

Publish Time: 2025-11-14 16:59:36 UTC+8
Last Updated: 2025-11-14 17:00:42 UTC+8
Severity: Moderate
Status: Resolved

Abstract
Synology has released a security update for the Synology Contacts package in DSM to address a vulnerability:

• • • CVE-2025-13167 allows remote authenticated users to read or write limited files.

Please refer to the ‘Affected Products’ table for the corresponding updates.

Affected Products:

Mitigation: None

Detail

• CVE-2025-13167
  • Severity: Moderate
  • CVSS3 Base Score: 5.4
  • CVSS3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
  • CWE-79: Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)
  • ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Acknowledgement
Warisse Valentin (Aytio)

Revision