GeneralInformation

Hostnames	efunke.de mail.efunke.de mail.networld.de
Domains	efunke.de networld.de
Country	Germany
City	Moers
Organization	Deutsche Telekom AG
ISP	Deutsche Telekom AG
ASN	AS3320
Operating System	Synology DiskStation Manager (DSM) 6.2-23739

WebTechnologies

JavaScript frameworks

Prototype1.7.2

ExtJS

JavaScript libraries

Elliptic

Network storage

Synology DiskStation

Vulnerabilities

Note: the device may not be impacted by all of these issues. The vulnerabilities are implied based on the software and version.

2022(1)

CVE-2022-27610

6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25423 allows remote authenticated users to delete arbitrary files via unspecified vectors.

2021(1)

CVE-2021-44142

8.8The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.

OpenPorts

22 69 443 5000 5001 5443

22 / tcp

1442197004 | 2025-03-28T14:04:37.234906

SSH-2.0-lancom
Key type: ssh-rsa
Key: AAAAB3NzaC1yc2EAAAABEQAAAQEAqhJq28b6iWRZ/qg3STuCwZw3SBDyrURvtZYMiRiywC+yVHS3
IEwaLMN9kSM6Tv48G2wMPOex9Qfo9ovyMFccb71UBsGv/Pkwwm10yNEgAmgW3p9YlCydz3fxJjHR
Zj7apLjJo7MHVmXkY+YdOE+tRW/ZbkA73EK7MISPn8b65S5DB3vn8JAWBplzUWcj4MA1Jc0RO75x
zq3XT2eJCIhrc8ib3TeEsFXB29aeiHYH0YIyetEhn7pdp3xSLhsTiZK6Cv3xw8mCeClpbqtb5/5k
vLfKTOIKuIw7c/5fFKfGGT5Eaf5QzTnxaQcD+b+7RLSS8WMj9kE0J0CfHUXRDOrhSw==
Fingerprint: e6:17:38:80:c7:86:e2:e1:fb:e6:60:14:8e:c4:5e:8b

Kex Algorithms:
	diffie-hellman-group-exchange-sha256
	ecdh-sha2-nistp256
	ecdh-sha2-nistp384
	ecdh-sha2-nistp521
	curve25519-sha256@libssh.org
	ext-info-s

Server Host Key Algorithms:
	ecdsa-sha2-nistp256
	rsa-sha2-512
	rsa-sha2-256
	ssh-rsa

Encryption Algorithms:
	aes256-gcm@openssh.com
	aes128-gcm@openssh.com
	chacha20-poly1305@openssh.com
	aes256-ctr
	aes192-ctr
	aes128-ctr
	aes256-cbc
	aes192-cbc
	aes128-cbc

MAC Algorithms:
	hmac-sha2-512
	hmac-sha2-256

Compression Algorithms:
	none
	zlib

69 / udp

1136816110 | 2025-04-07T11:08:45.706390

\x00\x05\x00\x05Unknown transfer ID\x00

443 / tcp

2032028725 | 2025-04-11T01:30:35.136223

Hashes

hash

-771134192

http.dom_hash

-622538488

http.favicon.hash

-1292923998

http.html_hash

2032028725

http.server_hash

869690771

http.title_hash

-1164686493

Citrix Gateway

HTTP/1.1 200 OK
Date: Fri, 11 Apr 2025 01:30:42 GMT
Server: Apache
X-Frame-Options: SAMEORIGIN
Last-Modified: Mon, 10 Jul 2023 17:41:17 GMT
ETag: "a732-600257d586940"
Accept-Ranges: bytes
Content-Length: 42802
Feature-Policy: camera 'none'; microphone 'none'; geolocation 'none'
Referrer-Policy: no-referrer
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, must-revalidate
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache

SSL Certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:68:58:02:20:2c:c7:0f:17:78:3a:66:65:38:c1:fb
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=GB, ST=Greater Manchester, L=Salford, O=Sectigo Limited, CN=Sectigo RSA Domain Validation Secure Server CA
        Validity
            Not Before: Apr 25 00:00:00 2024 GMT
            Not After : May 26 23:59:59 2025 GMT
        Subject: CN=*.efunke.de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:ba:54:27:85:cf:87:32:fc:d5:18:fd:32:
                    c0:5f:b8:1a:6b:ba:49:7e:9e:f8:d3:a3:b7:eb:71:
                    c2:98:37:ae:13:80:ac:33:5e:a2:52:5d:e5:97:35:
                    a0:ed:bc:8f:68:d3:e5:d5:35:39:51:b1:a2:d0:5e:
                    17:e8:67:a8:5e:77:eb:ec:68:cb:be:9d:58:3b:ca:
                    cb:43:49:2a:58:a8:86:cc:b0:54:ea:4e:73:b5:9d:
                    04:24:ee:9b:6b:44:0f:91:c0:b7:13:af:ba:7b:cc:
                    e8:e9:36:f8:ac:b2:7b:74:0a:a1:fb:87:1f:24:aa:
                    d3:e7:05:a8:b2:e3:36:26:b4:30:60:06:46:7e:28:
                    0a:06:fa:ca:fd:99:c5:7e:0e:ed:32:c8:b7:b5:02:
                    81:0b:ce:e0:2a:52:3d:7c:a5:d9:98:36:80:0b:71:
                    d4:ce:3c:37:8f:f8:70:f6:c6:76:ca:1f:28:ca:bc:
                    3d:96:7d:9e:ba:c7:11:e9:e4:13:4a:db:40:81:b8:
                    8d:0f:4e:38:50:35:f7:ba:dc:23:33:e0:30:37:5f:
                    b0:fa:c9:b3:1d:34:45:d5:fe:1e:af:5f:60:f3:21:
                    6c:95:2d:95:97:f1:6b:0e:3d:15:2a:1b:33:ab:62:
                    11:bf:ad:b7:a1:a5:1c:82:11:20:0f:34:42:a2:74:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Authority Key Identifier: 
                8D:8C:5E:C4:54:AD:8A:E1:77:E9:9B:F9:9B:05:E1:B8:01:8D:61:E1
            X509v3 Subject Key Identifier: 
                3D:41:B5:96:E9:D5:47:32:E1:E4:4F:72:1E:D3:D1:96:20:8C:9A:D7
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
            X509v3 Certificate Policies: 
                Policy: 1.3.6.1.4.1.6449.1.2.2.7
                  CPS: https://sectigo.com/CPS
                Policy: 2.23.140.1.2.1
            Authority Information Access: 
                CA Issuers - URI:http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt
                OCSP - URI:http://ocsp.sectigo.com
            X509v3 Subject Alternative Name: 
                DNS:*.efunke.de, DNS:efunke.de
            CT Precertificate SCTs: 
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : CF:11:56:EE:D5:2E:7C:AF:F3:87:5B:D9:69:2E:9B:E9:
                                1A:71:67:4A:B0:17:EC:AC:01:D2:5B:77:CE:CC:3B:08
                    Timestamp : Apr 25 11:14:17.353 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:21:00:93:20:00:FE:2F:F3:75:75:DC:ED:6F:
                                9D:61:AD:BE:E5:5C:A8:B7:9C:72:55:7C:F5:B6:4E:03:
                                2E:50:AB:2F:56:02:20:1D:93:F2:45:4A:36:E1:B3:4B:
                                90:07:F0:7E:A5:43:3D:72:A3:57:C2:90:C4:1C:40:2D:
                                FB:73:73:8A:FE:FC:A3
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : A2:E3:0A:E4:45:EF:BD:AD:9B:7E:38:ED:47:67:77:53:
                                D7:82:5B:84:94:D7:2B:5E:1B:2C:C4:B9:50:A4:47:E7
                    Timestamp : Apr 25 11:14:17.319 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:4A:11:C0:85:8C:2B:5D:7E:3A:C5:B2:A6:
                                9A:6A:37:C9:BD:D8:BB:52:FE:45:33:00:3F:6B:20:9C:
                                C3:71:53:58:02:21:00:CD:2A:9A:44:B7:C6:FB:CF:62:
                                7E:2D:91:62:E7:AE:4A:FC:79:58:89:87:CB:84:FF:FA:
                                88:CF:DB:8B:AF:04:CC
                Signed Certificate Timestamp:
                    Version   : v1 (0x0)
                    Log ID    : 4E:75:A3:27:5C:9A:10:C3:38:5B:6C:D4:DF:3F:52:EB:
                                1D:F0:E0:8E:1B:8D:69:C0:B1:FA:64:B1:62:9A:39:DF
                    Timestamp : Apr 25 11:14:17.319 2024 GMT
                    Extensions: none
                    Signature : ecdsa-with-SHA256
                                30:45:02:20:5A:EF:C1:44:1B:5A:4A:F2:F2:F8:8A:E0:
                                4F:3B:93:89:7B:67:46:7B:95:FE:3B:8A:F2:A7:04:90:
                                11:2B:B3:70:02:21:00:8E:F6:A5:7D:62:ED:3D:92:D8:
                                E5:1F:42:CE:37:2A:AA:F0:F8:A5:35:7A:79:9C:80:AB:
                                E0:5D:22:C4:C2:AE:B2
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        88:39:2a:d3:09:89:9e:30:1b:0e:bf:d7:e7:d0:eb:95:30:fb:
        ee:a0:eb:29:f9:15:ca:c0:81:dd:67:b5:ec:ab:39:0e:2d:d0:
        b7:d9:96:9f:5d:af:7d:ed:31:b7:fd:57:6c:3e:cf:e2:cc:46:
        2b:81:32:71:f8:c2:27:be:5e:23:a9:f5:dc:03:25:52:22:ec:
        17:11:d4:44:0b:b1:9a:9a:39:c8:16:6a:09:1d:50:68:e4:7d:
        43:d2:41:74:ff:82:1e:db:9e:12:17:a6:de:5c:87:d9:bd:07:
        6c:2b:02:a3:72:16:9d:1a:61:e2:aa:8e:ac:ec:20:c2:31:5d:
        72:fa:14:45:3b:f8:30:ed:8c:51:87:80:aa:6e:5c:c1:15:da:
        b6:4b:d5:74:2e:89:da:a3:8f:4a:d6:67:ff:ea:4e:20:ef:10:
        02:e1:41:be:15:6a:06:f5:97:f7:3d:05:d5:5f:e7:3d:9c:2d:
        c5:ec:8b:33:29:d8:36:1d:e3:52:61:e3:e9:f6:6c:d8:ac:a5:
        b5:04:3b:68:bf:06:1e:41:74:5c:cc:e4:17:6d:3e:d8:5a:6f:
        eb:3e:14:3f:ac:52:0d:e7:8c:6b:bb:69:b6:94:2c:92:79:4d:
        16:c2:ac:e8:b1:c7:1a:96:b6:db:b6:cd:51:7a:be:ad:93:c7:
        15:d4:fc:ff

5000 / tcp

-1140460599 | 2025-04-12T13:05:25.617875

Hashes

hash

-1243622795

http.dom_hash

877192207

http.favicon.hash

149371702

http.html_hash

-1140460599

http.server_hash

-1340961475

http.title_hash

200140015

DS918 - Synology DiskStation

HTTP/1.1 200 OK
Server: nginx
Date: Sat, 12 Apr 2025 13:05:25 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"


Synology DiskStation Manager (DSM):
  Version: 6.2-23739
  Hostname: DS918

Vulnerabilities

1 1

5001 / tcp

-1140460599 | 2025-04-10T23:04:06.175063

Hashes

hash

-964686728

http.dom_hash

877192207

http.favicon.hash

149371702

http.html_hash

-1140460599

http.server_hash

-1340961475

http.title_hash

200140015

DS918 - Synology DiskStation

HTTP/1.1 200 OK
Server: nginx
Date: Thu, 10 Apr 2025 23:04:05 GMT
Content-Type: text/html; charset="UTF-8"
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Cache-control: no-store
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"


Synology DiskStation Manager (DSM):
  Version: 6.2-23739
  Hostname: DS918

SSL Certificate

Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number:
            fb:1d:7e:a0:4d:f1:bc:ec
        Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=TW, L=Taipei, O=Synology Inc., CN=Synology Inc. CA
        Validity
            Not Before: Jul 19 14:15:31 2018 GMT
            Not After : Apr  5 14:15:31 2038 GMT
        Subject: C=TW, L=Taipei, O=Synology Inc., CN=synology.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c7:d0:a7:97:6c:85:a2:5c:58:07:98:03:36:78:
                    e7:9b:00:19:af:0b:f6:c7:06:30:e7:b6:e7:ba:53:
                    e5:5d:d7:74:2e:4f:c0:9d:4b:02:73:c5:a4:6a:8e:
                    ad:c7:92:3f:21:c0:d9:41:e4:32:8d:8d:5b:73:0b:
                    fa:ed:5f:bb:f2:7b:f7:f5:0a:d4:d6:dd:89:05:da:
                    16:50:2e:85:96:c0:96:42:94:fb:0b:2e:c2:c0:ef:
                    42:f3:d5:00:28:9a:e0:67:08:67:d1:ff:73:ce:2d:
                    12:eb:2c:94:67:85:4f:73:2b:8f:80:dc:d5:1f:5f:
                    3c:b8:de:49:8d:c0:1e:3b:39:40:3a:d9:8f:2a:4b:
                    4c:84:34:fe:ac:46:06:1f:36:a2:be:70:6c:1a:95:
                    e2:c5:43:0c:3a:66:3b:5a:da:7e:0a:76:59:c9:a8:
                    e8:38:d0:73:d9:8b:05:15:7c:80:da:4e:8a:c2:ae:
                    7b:b9:de:5d:33:d8:f4:60:11:8f:66:e0:90:ca:5d:
                    f6:ca:99:c4:a8:ca:52:16:59:f2:e6:c8:ad:2c:ac:
                    8d:35:83:a5:20:c0:55:31:42:14:23:b5:d1:4e:07:
                    9e:e6:ef:6c:11:98:6e:09:e3:d9:f0:37:02:71:b7:
                    07:6e:35:08:fa:44:c2:5f:b3:e5:96:75:f2:28:ba:
                    e6:b3
                Exponent: 65537 (0x10001)
    Signature Algorithm: sha256WithRSAEncryption
    Signature Value:
        14:b7:b0:47:e9:97:1c:db:f6:c5:bd:20:56:16:46:16:47:79:
        3a:7c:ed:42:c8:f6:e9:56:be:80:95:62:29:9d:1e:23:ca:cb:
        2e:46:b4:a3:1e:87:ba:e1:09:9d:29:ce:bf:88:cc:78:1a:78:
        d4:e5:9d:99:b9:2b:00:8a:e9:a7:48:92:d2:85:cb:6b:e2:94:
        54:7a:e8:3d:58:cb:53:3d:c9:50:21:63:0c:f7:79:e3:83:bd:
        60:30:ff:23:99:7e:c4:8b:ae:34:76:06:73:48:4e:17:08:68:
        96:d9:ba:4a:28:aa:f3:ab:39:3a:a5:92:69:dc:65:7d:4e:57:
        2b:64:95:81:db:1e:3b:da:99:50:ba:9c:f9:d7:c5:2d:a6:47:
        04:8e:1e:59:06:e4:f1:eb:fd:a5:84:b6:c8:25:c8:a3:8f:d8:
        9f:18:9a:3c:00:fd:01:76:11:36:70:18:28:50:9e:34:90:88:
        aa:74:95:2b:3c:99:a7:e2:eb:a2:c9:5a:eb:07:08:9f:ea:ad:
        e0:4c:b8:50:4a:69:ba:86:97:b0:30:08:ad:f8:b2:15:c5:06:
        24:f2:91:85:43:45:8f:92:98:7b:ec:18:ee:ad:64:06:81:89:
        38:b7:8c:27:ad:0a:40:42:69:fc:2a:01:61:2d:88:21:e2:26:
        71:0a:69:33

Vulnerabilities

1 1

5443 / tcp

556516568 | 2025-04-05T16:56:53.368377

Hashes

hash

-1774834424

http.dom_hash

1678420308

http.html_hash

556516568

http.server_hash

-1340961475

http.title_hash

-1391280995

400 The plain HTTP request was sent to HTTPS port

HTTP/1.1 400 Bad Request
Server: nginx
Date: Sat, 05 Apr 2025 16:56:53 GMT
Content-Type: text/html
Content-Length: 666
Connection: close

217.7.200.80

Last Seen: 2025-04-12

GeneralInformation

WebTechnologies

Vulnerabilities

OpenPorts

22 / tcp

1442197004 | 2025-03-28T14:04:37.234906

lancom sshd

69 / udp

1136816110 | 2025-04-07T11:08:45.706390

TFTP

443 / tcp

2032028725 | 2025-04-11T01:30:35.136223

Hashes

Apache httpd

5000 / tcp

-1140460599 | 2025-04-12T13:05:25.617875

Hashes

nginx

5001 / tcp

-1140460599 | 2025-04-10T23:04:06.175063

Hashes

nginx

5443 / tcp

556516568 | 2025-04-05T16:56:53.368377

Hashes

nginx

Products

Pricing

Contact Us

217.7.200.80

Last Seen: 2025-04-12

GeneralInformation

WebTechnologies

Vulnerabilities All ports Port 5000 Port 5001 Latest CVSS

OpenPorts

22 / tcp 1442197004 | 2025-03-28T14:04:37.234906

lancom sshd

69 / udp 1136816110 | 2025-04-07T11:08:45.706390

TFTP

443 / tcp 2032028725 | 2025-04-11T01:30:35.136223

Hashes

Apache httpd

5000 / tcp -1140460599 | 2025-04-12T13:05:25.617875

Hashes

nginx

5001 / tcp -1140460599 | 2025-04-10T23:04:06.175063

Hashes

nginx

5443 / tcp 556516568 | 2025-04-05T16:56:53.368377

Hashes

nginx

Products

Pricing

Contact Us

Vulnerabilities

22 / tcp

1442197004 | 2025-03-28T14:04:37.234906

69 / udp

1136816110 | 2025-04-07T11:08:45.706390

443 / tcp

2032028725 | 2025-04-11T01:30:35.136223

5000 / tcp

-1140460599 | 2025-04-12T13:05:25.617875

5001 / tcp

-1140460599 | 2025-04-10T23:04:06.175063

5443 / tcp

556516568 | 2025-04-05T16:56:53.368377