Hubbry Logo
SynologySynologyMain
Open search
Synology
Community hub
Synology
logo
7 pages, 0 posts
0 subscribers
Be the first to start a discussion here.
Be the first to start a discussion here.
Synology
Synology
from Wikipedia

Synology Inc. (Chinese: 群暉科技; pinyin: Qúnhuī Kējì) is a Taiwanese corporation that specializes in network-attached storage (NAS) appliances. Synology's line of NAS is known as the DiskStation for desktop models, FlashStation for all-flash models, and RackStation for rack-mount models. Synology's products are distributed worldwide and localized in several languages.

Key Information

Synology's headquarters are located in Taipei, Taiwan, with subsidiaries located around the world.

In 2018, product review website Wirecutter described Synology as a "longtime leader in the small-business and home NAS arena," albeit still a newcomer in the field of Wi-Fi routers.[1]

For years, Synology NAS units supported third-party hard drives, giving users the freedom to choose from various brands and capacities. That changed in 2025, when Synology started locking its NAS devices to only accept Synology-branded hard drives, effectively ending their long-standing tradition of open drive compatibility.[2][3]

With the release of DSM 7.3 in October 2025, Synology has reversed its lock on only allowing NAS devices manufactured in 2025 (i.e. - DS425, DS225, etc) to use Synology-branded hard drives (HDD) and once again third party hard drives can be used, restoring the open drive compatibility.[4]

Company history

[edit]
Derren Lu in 2016; at that time, he was the CTO of Synology.

Synology Inc. was founded in 2000 after Cheen Liao [zh] and Philip Wong [zh] left Microsoft to pursue an independent project.[5] Liao was a development manager in the Microsoft Exchange Server Group, while Wong was a Sales Director for Microsoft in Taiwan. Liao had joined Microsoft in 1989 and worked at the Seattle campus.[6] At Microsoft, Wong is credited with contacting Cher Wang to propose licensing Windows CE to First International Computer; Wang would later found HTC.[5] However, Wong felt that Taiwanese OEMs were doing most of the work for foreign brands, and left Microsoft;[5] when Liao was visiting his mother in Taiwan, Wong convinced him to found Synology, naming the company by taking one character from each of their names.[6]

Liao brought the Microsoft software development process to Taiwan, requiring that all code be reviewed by two other software engineers, and the code would not pass until the reviewing engineers endorsed the logic.[6] At Synology, Liao and Wong wrote a new operating system called Filer OS based on Berkeley Software Distribution (BSD), which was to be used with Fastora NAS hardware to create a NAS solution. Three years after founding the company, they shifted from exclusively licensed software to adding hardware design and production,[6] since the hardware partners who had been licensing the software had inconsistent quality control;[7] diagnosing failures required Synology's active participation, and as a new company, Synology had difficulty in gaining trust and recognition.[8] To vertically integrate their NAS software tightly with hardware, Synology released its first complete solution in 2004, the DiskStation DS-101. Initially, Synology targeted the power user and small to medium-sized business markets, as the high-end market for NAS solutions was dominated by EMC Corporation and NetApp.[5][8] To expand its market share in the United States, Liao decided to send gift baskets to popular review outlets, containing custom-printed chocolates with the Synology name.[6]

Synology DS-101, Rev. 3

Synology expanded beyond its roots in peripheral storage market by introducing a cloud service in 2017, initially using three data centers in Frankfurt, Germany.[8][9]

In 2007, Wong implemented a "rotating CEO system", in which a few senior employees served terms as the CEO;[8] Wong returned as CEO in 2019.[9] Liao and Wong are still with the company, with Liao serving as President of Synology America Corp. and Wong serving Chairman of Synology Inc.[when?] By 2014, revenue exceeded NT$10 billion.[7] Synology has grown from approximately 40 employees in 2008[7] to 600 employees in its Taiwan offices in 2017, of which 200 were software development engineers.[10] In 2018, Wong stated that Synology's profits were "in the same neighborhood as ASUS", which were approximately NT$4.2 billion that year.[5] The company consolidated its Taiwan offices and headquarters in 2019, moving from offices on Chang'an West Road and Chengde Road in Datong District, Taipei (near the Museum of Contemporary Art Taipei[10] and Taipei Main Station)[11] to the Far Eastern Telecom Park (Tpark) in Banqiao District.[5]

Products

[edit]

Synology uses an alphanumeric naming convention; the product name is two alphabetical characters followed by a three- or four-digit number, with an optional suffix attached. The alphabetical characters give the product category; for storage products, the first (hundreds place) digit is the number of internal drive bays, and the last two digits (tens and ones) is the year the product is intended to be sold.[12] The suffix can be a character, such as "+" to indicate increased performance over the suffix-free equivalent model, or a letter, such as "j", which is attached to entry-level products.[13]

For example, the DS211+ is a DiskStation (NAS) with two drive bays, released in 2011, with enhanced performance.[12] After Synology released NAS expansion chassis (DX and RXnnn), this scheme was modified slightly to incorporate a four-digit number in the product name; the first digit(s) (hundreds and thousands, if present) indicate the total number of drives supported. For example, the DS723+ has two internal drive bays, but it can be connected to the DX517 five-drive expansion chassis, supporting a total of seven drives.[14]

Storage

[edit]
NAS: Synology Disk Station DS223J

Consumer- and small/home business-oriented NAS products by Synology are sold under the DS (DiskStation) line, while larger businesses may choose the RS (RackStation) line of rack-mounted units; the corresponding expansion chassis include the DX (Disk eXpander) and RX (Rack eXpander), introduced in 2009.[15] Synology also marketed a CS (CubeStation) line of four-bay storage products, with the approximate shape of a cube,[16] but later folded these into the DS line.

In a review for SmallNetBuilder, Jim Buzbee was "impressed with the maturity of the DS-101's software and documentation" but felt the main negatives were "high cost and limited availability".[17]

In addition, Synology sells FS/FX (FlashStation), HD (High Density), SA (Scalable Architecture), and UC (Uptime Critical) networked storage products for larger businesses, housed in rack-mountable units.

DiskStation Manager

[edit]

DiskStation Manager (DSM) is a Linux-based operating system developed by Synology for its NAS products.[18]

Synology's software architecture allows for third-party add-on application integration. Hundreds of third-party applications are available in addition to Synology's own catalog. Command line access via SSH or Telnet is available. Access to development tools and APIs are also available on Synology's website. Third-party applications can be written in an interpreted programming language such as PHP or compiled to binary format. Public APIs allow custom applications to integrate into Synology's web-based user interface. Installers using the SPK format can install third-party applications directly on the DSM operating system.[19]

Vulnerabilities

[edit]

In 2014, a piece of ransomware emerged, dubbed "Synolocker," that targeted Synology NAS devices running DSM versions 4.0, 4.2, and 4.3.[20][21][22] Synology fixed the vulnerabilities in November and December 2013.[23]

Networking

[edit]

Synology sells wireless routers (RT) and wireless mesh routers (MR, WRX). For these products, the numbers following the product class indicate the speed class and Wi-Fi technology; for example, RT1900ac is an 802.11ac router with 1900 Mbit/s maximum combined throughput.[24][25] Synology routers are managed either through a browser-accessible software interface called SRM (Synology Router Manager), similar in appearance to DSM, or a smartphone application named DS Router.[26]

See also

[edit]

References

[edit]
[edit]
Revisions and contributorsEdit on WikipediaRead on Wikipedia
from Grokipedia
Synology Inc. is a Taiwanese multinational technology company specializing in (NAS) appliances, systems, and comprehensive solutions designed to enable businesses and individuals to store, protect, and access data across on-premises, hybrid, and cloud environments. Founded in 2000 by Cheen Liao and Philip Wong and headquartered at 9F, No.1, Yuandong Road, , , , the company has grown to operate six global branches and serve tens of thousands of channel partners worldwide. Synology's core offerings include a wide range of product lines, such as the Plus Series for enhanced data protection and scalability, the J Series for simple and management, the FS and SA Series for high-availability and flash-optimized storage, the HD Series for high-density SAS servers, the XS+/XS Series for enterprise-grade performance, the UC Series for high-availability SAN storage, and the Value Series for cost-effective solutions. Complementing its hardware, Synology provides the DiskStation Manager (DSM) operating system, a Linux-based platform that powers its devices with features like AI-enhanced photo management in Synology Photos, via Synology Drive, collaborative tools in Synology Office, and backup capabilities through Hyper Backup and Active Backup for Business. The company also extends into with the DVA Series of AI-powered network video recorders (NVRs) for secure video management and analytics. With over 13 million installations globally, Synology emphasizes energy-efficient, reliable, and user-friendly solutions that address data growth, cybersecurity, and hybrid work challenges, earning recognition such as a 4.7 out of 5 rating in Peer Insights for Primary Storage Platforms. Its commitment to innovation is evident in recent developments like DSM 7.3, released in October 2025, which integrates privacy-focused AI and modular software packages to streamline IT operations.

Overview

Founding and leadership

Synology Inc. was founded in 2000 in , , by Cheen Liao and Philip Wong, both former employees who left the company to pursue an independent venture in solutions. Liao had served as a development manager responsible for the storage engine in , while Wong held the position of sales director. The duo aimed to address the growing need for affordable, user-friendly data management tools for small and medium-sized businesses, drawing on their expertise in software and sales. Initially, Synology concentrated on rather than hardware production, creating a BSD-based operating system known as Filer OS designed to run on partner-manufactured devices, such as those from Fastora, to provide a cost-effective alternative to proprietary systems like Microsoft's Small Area Network (SAN). However, dissatisfaction with the reliability and quality of third-party hardware prompted a strategic pivot in 2003, leading Synology to begin manufacturing its own integrated solutions. This shift enabled tighter coupling of the software with hardware, culminating in the release of the company's first complete product, the DiskStation DS-101, in 2004. Under the leadership of its founders, Synology adopted an innovative management approach, with Philip Wong implementing a rotating CEO system in 2007 that allowed senior executives to serve successive terms in the role to foster diverse perspectives and operational agility. Wong, who had stepped back from day-to-day operations, returned as CEO in 2019 while retaining his position as chairman, a role he continues to hold as of 2025. Cheen Liao, co-founder, remains associated with the company and contributes to related technology initiatives. The company's emphasis on internal talent has driven significant workforce expansion, growing from approximately 40 employees in 2008 to over 600 in its headquarters by 2017, with a substantial portion—around 70 percent—dedicated to , including more than 200 software engineers focused on enhancing operating systems and applications. By 2025, the company employs around 700-1,000 people globally, maintaining a strong focus on R&D.

Mission and global operations

Synology's mission is to manage and protect the world's by providing simple, secure, and reliable solutions that enable businesses to secure and scale their across flash, disk, and architectures. This focus emphasizes comprehensive , allowing organizations to handle their information needs wherever access is required, from on-premises edge devices to hybrid environments. The company's business model centers on delivering (NAS) and related solutions tailored for a broad range of users, including home users, small and medium-sized businesses (SMBs), and enterprises across various industries. Synology operates through a robust of tens of thousands of channel partners worldwide, facilitating distribution and support for its products. With over 13 million installations globally, the model prioritizes ease of use, , and integration to drive productivity and data protection for diverse customer segments. Synology maintains its global operations from its headquarters in , , , supported by six branches in key regions. These include offices in the United States (, and ), the (), (), (), (), and (). To extend its reach into cloud-based services, Synology launched its C2 platform in late 2017, starting with a in , , to ensure compliance with European data privacy standards and provide reliable and storage options. This infrastructure supports the company's commitment to hybrid solutions, complementing its on-device offerings with scalable capabilities.

History

Early development (2000–2010)

Synology, co-founded in 2000 by Philip Wong and Cheen Liao, initially developed Filer OS, a operating system based on , intended for integration with hardware from original equipment manufacturers (OEMs) such as Fastora. However, quality issues with these OEM partners prompted a strategic shift toward in-house hardware design in 2003, allowing greater control over product reliability and performance. This transition marked the company's evolution from a software provider to a full-stack solution developer. The first fruit of this change was the DiskStation DS-101, a single-bay server released in March 2004, targeted at power users and small to medium-sized businesses (SMBs) seeking affordable centralized storage and . Featuring an IXP425 network processor and support for IDE hard drives, the DS-101 introduced Synology's user-friendly DiskStation Manager (DSM) interface, emphasizing ease of setup and remote access capabilities. Building on this foundation, Synology expanded the DS series with models like the DS-106 in 2006, which added support and enhanced networking for multi-user environments, and the DS-106e in 2006, incorporating for improved data throughput. By the late , Synology had solidified its R&D emphasis on scalable storage solutions, culminating in the introduction of expansion chassis such as the DX510 and RX510 in 2010. These units allowed users to extend capacity on compatible DiskStation and RackStation models without , supporting hot-swappable drives and integration with existing volumes for growing SMB needs. From its startup origins, the grew steadily, establishing a dedicated team focused on innovation in embedded systems and storage management.

Expansion and recent milestones (2011–2025)

In the early 2010s, Synology accelerated its expansion, achieving annual revenue of approximately NT$10 billion by 2014 amid rising demand for solutions. By 2017, the company's workforce in had grown to over 600 employees, with around 70% focused on research and development activities, including a significant emphasis on . This period marked a shift toward broader , with global revenue reaching $300 million that year and sales of 6 million units. Key product line expansions bolstered Synology's enterprise offerings during this timeframe. The RackStation (RS) series saw enhancements for scalable rackmount storage, exemplified by the introduction of high-capacity models like the RS18017xs+ in 2017, supporting up to 180 drives for large-scale deployments. In 2016, Synology launched the FlashStation (FS) series, debuting with the all-flash FS3017 to address latency-sensitive workloads in enterprise environments. Enterprise-focused lines followed in 2019, including the SA series for highly scalable storage up to 1.5 PB per system and the UC series, starting with the active-active UC3200 IP SAN for mission-critical services. Operational milestones underscored Synology's maturation. In 2017, the company entered the cloud services market with the beta launch of Synology C2 in March, followed by the full release of C2 Backup in September, providing cost-effective offsite data protection integrated with systems. In 2019, Synology consolidated its Taiwan operations, relocating its headquarters to , , to streamline global coordination from a centralized location. Recent years highlighted Synology's innovation and recognition. On November 6, 2025, the company celebrated its 25th anniversary by unveiling next-generation enterprise solutions, including advancements in data protection, AI-powered surveillance, and high-performance storage to enhance and . In August 2025, Synology was included in the for Primary Storage Platforms report, earning a 4.7 out of 5 rating based on user feedback for features like ease of use, , and support. These developments reflect Synology's evolution from a NAS pioneer to a comprehensive provider serving millions of installations worldwide.

Products

Network-attached storage systems

Synology's (NAS) systems are hardware devices designed to provide centralized and access over a network, catering to a range of users from individuals to large organizations. These systems feature modular enclosures that support multiple hard disk drives (HDDs) or solid-state drives (SSDs), with varying bay configurations for scalability. The hardware emphasizes reliability, energy efficiency, and compatibility with standard drive formats like 3.5-inch and 2.5-inch /SAS. The primary product lines include the DiskStation (DS) series, targeted at consumers and small-to-medium businesses (SMBs), which offers desktop-form-factor NAS units in subcategories such as Plus for high-performance models with advanced processors and expandable RAM, Value for cost-effective basic storage, and J for entry-level, low-power options suitable for light home use. For example, the 1-bay DS124 (166 mm × 71 mm × 224 mm, 0.7 kg, black) is the most compact model, while the 2-bay DS223j (165 mm × 100 mm × 225.5 mm, 0.88 kg, white) and DS223 (165 mm × 108 mm × 232.7 mm, 1.28 kg, black) offer entry-level options with the DS223 being the widest and deepest among these compact models. Popular models in the Plus series for home users include the DS224+ (2-bay), DS423+ (4-bay), DS923+ (4-bay), and DS425+ (4-bay), which are favored for their balance of performance, affordability, and features like 2.5GbE networking suitable for personal media servers and backups. RackStation (RS) series provides rackmount solutions for enterprise environments, supporting higher densities and redundant power supplies for continuous operation. FlashStation FS series models deliver all-flash storage optimized for input/output-intensive tasks with NVMe caching. Enterprise-grade lines encompass HD for high-density storage, SA for SAS-based scalability in large deployments, XS+/XS for high-performance enterprise NAS with advanced scalability and redundancy, and UC for unified controller architectures in data-intensive setups. Synology employs an alphanumeric for its models to indicate form factor, capacity, release timeline, and feature level. For instance, the prefix denotes the series (e.g., DS for DiskStation, RS for RackStation), followed by the number of drive bays (e.g., DS2 for two bays), a two-digit code approximating the release year or generation (e.g., 11 for 2011), and a like "+" for enhanced performance with better CPUs and networking, "j" for basic models, or no suffix for standard Value series. Recent 2025 models exemplify this evolution: the DS925+ (4-bay Plus series) features an Ryzen V1500B quad-core processor, 2.5GbE ports, and M.2 NVMe slots for up to 9 bays via expansion; the DS1525+ (5-bay) offers similar upgrades with improved for SMBs; and the DS1825+ (8-bay) provides enhanced throughput for demanding workloads, supporting up to 18 bays total. These updates reflect Synology's focus on modern processors and faster connectivity to handle growing data volumes. Expansion options enhance storage capacity without replacing the core unit, with DX-series chassis compatible for DiskStation models and RX-series for RackStation since their introduction around 2009. For example, the DX517 adds five bays with hot-swappable trays, while the RX1222sas provides 12 SAS bays for enterprise redundancy, enabling configurations up to 84 drives in clustered setups. These systems serve diverse markets, from home users with compact 1-2 bay J-series units for personal media storage, to SMBs using 4-8 bay Plus models for and backups, and enterprises deploying 8-12+ bay rackmount RS or SA series in data centers for mission-critical applications requiring and petabyte-scale storage. All models run on Synology's DiskStation Manager (DSM) operating system for unified management.

DiskStation Manager and software

DiskStation Manager (DSM) is a Linux-based operating system designed specifically for Synology's () devices, providing an intuitive web-based interface for managing digital assets in home and professional environments. DSM is recognized for its mature and polished software, featuring an extensive app ecosystem that enhances its reliability and makes it suitable for beginners or users seeking a low-maintenance "set it and forget it" setup. It supports the installation of third-party applications through SPK packages via the Package Center, enabling users to extend functionality with developer-created tools while maintaining compatibility across Synology's ecosystem. DSM also includes advanced access features such as SSH and for services, configurable through the Terminal settings, and offers public APIs for services like File Station, Synology Drive, and Office Suite to facilitate custom integrations and automation. The operating system has evolved through several major versions, with DSM 7.3 released on October 8, 2025, introducing efficient tiering for optimized storage performance, enhanced security measures including stricter access controls and immutable storage options, AI-powered collaboration tools via Synology AI Console for tasks like masking and filtering, and expanded storage flexibility to address modern needs. As a long-term support (LTS) version under Synology's Software Life Cycle Policy, DSM 7.3 receives extended updates, with support continuing until October 2028, providing 9 years of maintenance including security fixes and enhancements for compatible models. Earlier iterations, such as DSM 7.2, built on this foundation by adding full-system backups and faster capabilities. DSM 7.3 maintains backward compatibility with prior versions while supporting all Synology DS (DiskStation), RS (RackStation), and FS (FlashStation) models, ensuring seamless upgrades across the product lineup. Synology's software ecosystem complements DSM with a range of integrated applications accessible through the Package Center, focusing on data management, collaboration, and virtualization. Key tools include Hyper Backup, which enables multi-tier backups to cloud providers, USB devices, or other Synology NAS units with client-side AES-256 encryption and support for bare-metal recovery. Synology Drive serves as a private cloud platform for secure file synchronization, sharing, and version control across devices and platforms, integrating with web APIs for workflow automation. For virtualization, Virtual Machine Manager allows users to run multiple virtual machines and containers on the same hardware, leveraging DSM's storage and networking features to combine virtual services with native applications, including Docker support via Container Manager. These tools, along with hundreds of other packages, create a versatile environment for personal and enterprise use, all managed centrally within DSM's unified interface.

Networking equipment

Synology offers a range of networking equipment designed to provide robust connectivity for home and small-to-medium business (SMB) environments, particularly as a complement to its () systems. The product lineup includes wireless routers from the RT series and systems from the and WRX series, all powered by the Synology Router Manager (SRM) operating system. The RT series comprises standalone wireless routers suitable for central . For instance, the RT1900ac model supports the 802.11ac ( 5) standard, delivering combined speeds of up to 1900 Mbit/s across dual 2.4 GHz and 5 GHz bands, with three internal antennas for reliable coverage. Newer models like the RT2600ac and RT6600ax extend this with 5 and (802.11ax) capabilities, respectively, offering tri-band operation on the latter for speeds up to 6600 Mbit/s and enhanced performance in dense device environments. These routers target users seeking integrated networking solutions that enhance setups through seamless device connectivity. Complementing the RT series, the MR and WRX series focus on mesh networking for whole-home or office coverage. The MR2200ac serves as a dedicated mesh point with tri-band Wi-Fi 5 support, enabling seamless extension of the network via a single SSID to eliminate dead zones. The WRX560, a Wi-Fi 6 dual-band router, provides superior throughput and wide signal coverage, ideal for modern households with multiple connected devices. These systems allow users to scale coverage by adding compatible nodes, ensuring consistent performance across larger spaces. Key features across Synology's networking equipment include dual- or tri-band for reduced interference, built-in VPN server and client support for secure remote access, and to manage device usage and content filtering. Integration with devices enables unified management, such as prioritizing traffic for storage backups or media streaming directly from the router interface. This setup is particularly beneficial for SMBs and home users who rely on Synology ecosystems for efficient data handling. Management is handled through SRM, a user-friendly operating system that offers detailed network insights, threat protection, and customizable access rules to segment traffic for devices, users, and applications. SRM's intuitive interface supports advanced configurations like mesh deployment and traffic control, while the DS Router mobile app allows convenient setup, real-time monitoring, and activity safeguards from smartphones. Brief integration with DiskStation Manager (DSM) on NAS units further streamlines oversight of combined storage and networking tasks.

Surveillance and data protection solutions

Synology's Surveillance Station is a comprehensive software package designed for managing IP cameras and video systems, enabling users to monitor live feeds, record footage, and receive real-time alerts from a centralized interface. It supports over 8,900 models and integrates seamlessly with Synology devices to function as a (NVR), providing scalable storage for video data without requiring dedicated hardware. Synology also offers the Series of dedicated AI-powered s (NVRs), such as the DVA3221, for scalable video management and analytics in professional setups. Key features include event detection through motion sensing and intelligent analytics, mobile access via dedicated apps for on and Android devices, and enterprise scalability that accommodates multi-site deployments with thousands of cameras across hundreds of servers. In 2025, Surveillance Station received updates enhancing its AI-powered capabilities, including advanced video analytics for faster camera deployment and custom monitoring consoles. These AI features enable intelligent analysis for detecting specific events, such as unauthorized access or unusual activities, improving security insights in environments like retail and . integration via C2 Surveillance allows for remote backup and hybrid on-premises-to-cloud management, ensuring footage redundancy and accessibility. At its 25th anniversary event in November 2025, Synology unveiled next-generation AI video surveillance solutions, introducing real-time analytics capable of detecting people, vehicles, and intrusions to enhance proactive monitoring. These advancements build on Surveillance Station's foundation, tying into hardware for robust NVR performance and supporting the CC400W AI-powered camera for simplified deployments without complex wiring. For data , Synology offers Hyper Backup, a tool that facilitates multi-version of data to local, remote, or destinations, preserving file histories to mitigate and accidental deletions. It supports versatile multi-tier plans, allowing centralized management of backup tasks for comprehensive data resilience across devices. In 2025, advancements focused on , including enhanced recovery options in the ActiveProtect lineup with the DP7200 appliance, which powers immutable and rapid restoration for enterprise workloads. Complementing these, BeeDrive serves as a personal solution in the form of a portable SSD that automatically backs up files from computers, mobile devices, and external drives, with AI-powered search for quick content retrieval. It includes version history, real-time sync, and features like BeeDrop for photo transfers from phones, providing subscription-free for individual users within the Synology .

Security and controversies

Known vulnerabilities

In 2014, Synology DiskStation Manager (DSM) versions 4.0 through 4.3 were targeted by the SynoLocker , which exploited two previously patched vulnerabilities from late , allowing attackers to upload malicious code and encrypt user data on affected devices. The demanded a ransom of 0.6 (approximately $350 at the time) for decryption keys, impacting numerous users who had not applied the available security updates. This incident highlighted risks from weak password practices and unpatched systems, as attackers scanned for vulnerable devices via open ports. Prior to 2025, DSM faced several documented security vulnerabilities listed in the Common Vulnerabilities and Exposures (CVE) database, including high-severity issues that enabled remote code execution or unauthorized access. For instance, CVE-2021-26561 involved a stack-based buffer overflow in the synoagentregisterd component of DSM versions before 6.2.3-25426-3, permitting man-in-the-middle attackers to execute arbitrary code with elevated privileges (CVSS score 8.1). Another example is CVE-2024-10441, an improper encoding vulnerability in DSM 7.2 and earlier that allowed remote attackers to execute arbitrary code without authentication (CVSS score 9.8). These flaws underscored the importance of timely DSM updates to mitigate exploitation risks. In 2025, additional vulnerabilities were reported, including CVE-2025-1021, a missing authorization flaw in the synocopy component of DSM versions before 7.2.2-72806-3, allowing remote authenticated users to access sensitive files (CVSS score 6.5). More critically, in November 2025, Synology addressed CVE-2025-12686, a remote execution vulnerability in BeeStation OS versions before the patch released on November 12, 2025, stemming from demonstrations at Ireland 2025 (CVSS score 9.8). This issue enabled unauthenticated attackers to execute arbitrary , highlighting ongoing risks in Synology's ecosystem. In 2026, Synology published Security Advisory SA-26:01 addressing CVE-2026-2237, a moderate severity vulnerability (CVSS 3.1 Base Score: 6.2) in Storage Manager for DSM 7.3, 7.2.2, and 7.2.1 (CWE-598). The vulnerability allowed local attackers to obtain sensitive information via the use of GET requests with sensitive query strings. It was fixed by upgrading to Storage Manager version 1.0.1-1100 or later.

Policy changes and responses

In response to the SynoLocker incident that targeted unpatched Synology devices in 2014, the company emphasized the importance of applying prior updates, which had addressed the exploited vulnerabilities in DSM versions released in November and December 2013. Synology issued an official advisory on August 7, 2014, urging users to update to DSM 5.0 or later, or equivalent patches for older branches like DSM 4.3-3827, to mitigate risks, and provided guidance on system recovery without paying the . This event underscored Synology's commitment to proactive , leading to the establishment of ongoing advisories and automatic update mechanisms in DSM to prevent similar exploits. A notable policy shift occurred in April 2025, when Synology introduced restrictions limiting full functionality in new NAS models, such as the DS925+ and DS1825+, to only Synology-branded hard drives and SSDs, aiming to ensure system reliability and long-term support. This change sparked significant backlash from the user community, including concerns over reduced flexibility and increased costs, which reportedly contributed to a sharp decline in sales for the 2025 lineup. In response, Synology reversed the policy on October 8, 2025, with the release of DSM 7.3, restoring support for third-party HDDs and SSDs in DiskStation Plus, Value, and J-series models while maintaining the requirement for HCL-listed SSDs in M.2 NVMe slots. Official statements from Synology highlighted the company's dedication to user feedback and ecosystem reliability, noting that certified drives on the updated compatibility list would continue to receive prioritized validation and support. In 2025, Synology introduced an initial policy for new NAS models requiring the use of only Synology-branded or certified third-party hard drives and SSDs to ensure compatibility and , effectively locking out non-approved storage media during initial setup. This restriction, aimed at preventing potential or performance issues, drew significant user backlash for creating and limiting hardware flexibility. Critics argued it could indirectly heighten security risks by discouraging users from upgrading to supported hardware. DSM 7.3 introduced broader enhancements, including improved options that allow unlocking shared folders and volumes with a single vault for streamlined yet secure access, and Synology Tiering, which automates movement between high-performance "hot" tiers (e.g., SSDs) and cost-effective "cold" tiers based on access patterns to optimize and . Synology maintains regularly updated compatibility lists for drives and peripherals, committing to ongoing testing and expansion to accommodate evolving hardware while prioritizing verified components for stability. These measures reflect Synology's adaptive approach to policy and , balancing with community-driven adjustments.

References

Add your contribution
Related Hubs
User Avatar
No comments yet.