[False positive?] Synology DSM Remote Known Vulnerable Versions Check is still getting recognized despite the latest DSM version

[latency0ms]

Dear Greenbone Community

We have noticed that Greenbone (Community Edition) still shows a vulnerability despite the current Synology DSM version, the feed database of GVM is of course up to date.

For us, this looks like a clear flase positive and maybe someone of you has had similar experiences.

Here are a few details:

Scanned target: Synology NAS RS820RP+ with DSM version DSM 7.2.2-72806 Update 2

GVM Feed Status:

GVM Report:

Somehow, it detects the “wrong” version - keep in mind that our NAS is running on DSM 7.2.2-72806 Update 2 as shown above

Again, our DMS is already running on a newer FW

Any comment or possible solution is highly appreciated.

Thanks - we love your product!

L0MS

[cfi]

Hello,

and welcome to this community forum. Please see the following existing thread and the relevant last post from two days ago:

VT OID: 1.3.6.1.4.1.25623.1.0.170202 is not 100% correct

this test is using the contents of /synohdpack/synohdpack.version to determine the DSM version. however the version numbers in this file are from the Synology HDD/SDD Drive Database and they are not necessarily in line with the actual DSM version number, especially after installing an update manually. the actual version number is in the file /etc(.defaults)/VERSION but that one is not included in the nginx setup.