Critical severity9.8NVD Advisory· Published Jul 13, 2018· Updated Jun 17, 2026

CVE-2016-6554

Description

Synology NAS servers DS107, firmware version 3.1-1639 and prior, and DS116, DS213, firmware versions prior to 5.2-5644-1, use non-random default credentials of: guest:(blank) and admin:(blank) . A remote network attacker can gain privileged access to a vulnerable device.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Synology/Ds107 Firmware
cpe:2.3:o:synology:ds107_firmware:*:*:*:*:*:*:*:*
Range: <=3.1-1639
Synology/Ds116 Firmware
cpe:2.3:o:synology:ds116_firmware:*:*:*:*:*:*:*:*
Range: <=5.2-5644-1
Synology/Ds213 Firmware
cpe:2.3:o:synology:ds213_firmware:*:*:*:*:*:*:*:*
Range: <=5.2-5644-1
Synology/NAS serversllm-create
Synology/DS107llm-fuzzy
Range: 3.1-1639 and prior
Synology/DS116llm-fuzzy
Range: prior to 5.2-5644-1
Synology/DS213llm-fuzzy
Range: prior to 5.2-5644-1
Synology/NAS server DS107v5
Range: 3.1-1639
Synology/NAS server DS116v5
Range: 5.2-5644-1
Synology/NAS server DS213v5
Range: 5.2-5644-1

Patches

Vulnerability mechanics

References

www.kb.cert.org/vuls/id/404187nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/93805nvdThird Party AdvisoryVDB Entry
www.synology.com/en-global/releaseNote/DS213nvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000