Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.
HTTP/1.1 401 Unauthorized Server: YAPS WWW-Authenticate: Digest realm="YapsieWorld", qop="auth", nonce="d4a3cd16c85edc108dce5859cfd2c8f1", opaque="3b44cc93519bde2b1d14d2a1877f19e3" Content-Length: 0 Connection: close
HTTP/1.1 200 OK Server: nginx Date: Sat, 08 Feb 2025 08:00:40 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Cache-control: no-store
HTTP/1.1 200 OK Server: nginx Date: Tue, 28 Jan 2025 02:12:41 GMT Content-Type: text/html; charset="UTF-8" Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Vary: Accept-Encoding Cache-control: no-store X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Content-Security-Policy: base-uri 'self'; connect-src data: ws: wss: http: https:; default-src 'self' 'unsafe-eval' data: blob: https://*.synology.com https://www.synology.cn/ https://help.synology.cn/; font-src 'self' data: https://*.googleapis.com https://*.gstatic.com https://fonts.gstatic.com; form-action 'self'; frame-ancestors 'self'; frame-src 'self' data: blob: https://*.synology.com https://*.synology.cn https://www.youtube.com http://www.youtube.com http://*.synology.com http://*.synology.cn; img-src 'self' data: blob: https://*.google.com https://*.googleapis.com http://*.googlecode.com https://*.gstatic.com https://global.download.synology.com https://maps.gstatic.com https://*.googleapis.com https://*.google.com https://i.ytimg.com https://*.ggpht.com; media-src 'self' data: about: https://*.synology.com https://help.synology.cn; script-src 'self' 'unsafe-eval' data: blob: https://maps.google.com https://ajax.googleapis.com https://help.synology.com https://help.synology.cn https://maps.google.com https://maps.googleapis.com; style-src 'self' 'unsafe-inline' https://*.googleapis.com https://fonts.googleapis.com; Synology DiskStation Manager (DSM): Version: 7.1.1-42962 Hostname: WesolaChmurka
Certificate: Data: Version: 3 (0x2) Serial Number: 03:55:85:10:1f:16:ab:c0:1b:8a:77:44:08:5e:ee:f4:da:f7 Signature Algorithm: ecdsa-with-SHA384 Issuer: C=US, O=Let's Encrypt, CN=E6 Validity Not Before: Jan 27 18:22:46 2025 GMT Not After : Apr 27 18:22:45 2025 GMT Subject: CN=wesolachmurka.synology.me Subject Public Key Info: Public Key Algorithm: id-ecPublicKey Public-Key: (256 bit) pub: 04:c5:e7:ad:1b:7d:c1:35:e7:a1:d3:62:e0:d6:2a: 86:f4:2f:62:3b:23:fd:f2:f3:11:3d:0a:e8:e4:f6: 17:51:dc:3f:ba:4f:93:1e:56:64:21:7e:05:bb:41: 05:c0:b8:a3:4a:ba:1b:e2:2b:c4:4f:bf:1e:a6:70: 8f:95:29:ac:81 ASN1 OID: prime256v1 NIST CURVE: P-256 X509v3 extensions: X509v3 Key Usage: critical Digital Signature X509v3 Extended Key Usage: TLS Web Server Authentication, TLS Web Client Authentication X509v3 Basic Constraints: critical CA:FALSE X509v3 Subject Key Identifier: C6:CE:8F:0A:74:87:24:82:20:36:F7:1F:16:6B:74:76:B4:5C:62:C0 X509v3 Authority Key Identifier: 93:27:46:98:03:A9:51:68:8E:98:D6:C4:42:48:DB:23:BF:58:94:D2 Authority Information Access: OCSP - URI:http://e6.o.lencr.org CA Issuers - URI:http://e6.i.lencr.org/ X509v3 Subject Alternative Name: DNS:wesolachmurka.synology.me X509v3 Certificate Policies: Policy: 2.23.140.1.2.1 CT Precertificate SCTs: Signed Certificate Timestamp: Version : v1 (0x0) Log ID : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53: D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7 Timestamp : Jan 27 19:21:16.180 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:66:24:1D:B3:E3:D7:67:12:27:B2:1F:0F: B6:9A:FA:BB:6A:C2:3B:50:3F:53:BF:C7:6A:A2:C9:59: EF:61:42:B9:02:21:00:A9:34:30:E0:E2:8F:E1:82:E3: E7:7E:3B:8C:AB:A4:05:38:73:82:D4:C2:14:7B:A4:5E: AE:4B:92:8B:69:13:4F Signed Certificate Timestamp: Version : v1 (0x0) Log ID : 13:4A:DF:1A:B5:98:42:09:78:0C:6F:EF:4C:7A:91:A4: 16:B7:23:49:CE:58:57:6A:DF:AE:DA:A7:C2:AB:E0:22 Timestamp : Jan 27 19:21:16.476 2025 GMT Extensions: none Signature : ecdsa-with-SHA256 30:45:02:20:2A:D1:4D:F0:3B:D7:DF:F7:4E:C8:AC:7C: F9:5B:F5:27:3F:92:5C:1D:C8:AA:99:B8:AB:8A:9F:14: 34:E7:B0:3A:02:21:00:FA:A2:2F:3F:FD:D3:B3:3E:AF: 68:F9:05:3D:4B:03:15:1C:B8:E7:5E:61:01:51:29:65: 66:CE:EC:61:0E:27:01 Signature Algorithm: ecdsa-with-SHA384 Signature Value: 30:64:02:30:44:b5:53:a5:47:b0:d8:30:11:cd:05:69:37:a0: 9a:c7:b6:58:74:62:c9:09:54:3c:13:e6:ea:c2:8b:0d:23:fe: 03:0c:3b:25:10:37:86:ea:69:3a:7e:07:9d:34:90:8c:02:30: 0d:f4:ec:cb:ec:b4:77:cd:6c:7d:db:9c:b2:ed:92:3c:59:77: a8:ad:ab:21:7c:a4:87:1d:24:4a:04:0e:e1:75:88:01:d3:d8: 82:b6:a2:cb:34:3c:cd:5c:7d:3c:07:24
SSH-2.0-OpenSSH_8.2 Key type: ssh-rsa Key: AAAAB3NzaC1yc2EAAAADAQABAAABgQCgpJMxAl/CXBa2i74E1TUyVBY7fDniSk3xSBtGP4ACPkfx +sUc64MAQ5fwDm8PxzDgdj5jYWn90XKze6yyAgC28I/ZsyxqY2XMFmP8s6iQCb/tTGPO0EzVkx2h gP4VAuH3acvPcNn5GUrIBrYQGauunXk0oE7GdwtgI0fin/3/rE5ESgLKCVJX5VEuJcE5QqB2sunG nvjIBZlBkNSmo2uctaYIGqFW1IOJr/bXAT6fWtiVNyE7T3DpQxL+Igageum+n5dWVhFpCOINNmkp QjpJXQMA0nMM6MATkwJAcFLzYydwK0YzHMgIYhjQ2I8OIIMlqvbzwOiN9ZM1caOxDVq+9ETIWvkc bq93K0vgRtjxEjpX82fDUNaVflLjK0XW1bDlmjCdBV70iicfKdllp1H7d/2EjVsjZx7KuY4eHuSg oz1BsEgIv2Ue9YB2i9z2Y91TX8tiESVNy/3PnJBWSD5fxCUGNKvE4duq4GKqpztJU+ObwMH57L2/ P27I/qvP5As= Fingerprint: 1f:91:96:68:d5:86:45:eb:0e:3b:49:f8:df:94:74:51 Kex Algorithms: curve25519-sha256 curve25519-sha256@libssh.org ecdh-sha2-nistp256 ecdh-sha2-nistp384 ecdh-sha2-nistp521 diffie-hellman-group-exchange-sha256 diffie-hellman-group16-sha512 diffie-hellman-group18-sha512 diffie-hellman-group14-sha256 kex-strict-s-v00@openssh.com Server Host Key Algorithms: rsa-sha2-512 rsa-sha2-256 ssh-rsa ecdsa-sha2-nistp256 ssh-ed25519 Encryption Algorithms: chacha20-poly1305@openssh.com aes128-ctr aes192-ctr aes256-ctr aes128-gcm@openssh.com aes256-gcm@openssh.com MAC Algorithms: umac-64-etm@openssh.com umac-128-etm@openssh.com hmac-sha2-256-etm@openssh.com hmac-sha2-512-etm@openssh.com hmac-sha1-etm@openssh.com umac-64@openssh.com umac-128@openssh.com hmac-sha2-256 hmac-sha2-512 hmac-sha1 Compression Algorithms: none zlib@openssh.com
Shodan ® - All rights reserved