CVE-2021-33180

CRITICAL 9.8CVE-2021-33180 · Published 01/06/2021 · updated 17/06/2026

In short

CVE-2021-33180 is a CRITICAL (CVSS 9.8) vulnerability affecting media server (synology).
Chance of exploitation in the next 30 days (EPSS): 0.99%, higher than 62.6% of all vulnerabilities.
Fix: update to 1.8.1-2876 or later.

Package	Affected versions	Patched versions
media server synology	`< 1.8.1-2876`	`1.8.1-2876`

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

References

synology.com/security/advisory/Synology_SA_20_24 · Vendor Advisory

More vulnerabilities in media server

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

media server

synology

< 1.8.1-2876

1.8.1-2876

More vulnerabilities in media server

See all →