Synology Download Station

• CVE-2021-34809 Critical 9.9 Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticat 1.9%
• CVE-2021-34810 Critical 9.9 Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors. 1.4%
• CVE-2021-34811 Medium 5.0 Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspeci 0.8%