{"id":7247,"date":"2025-11-19T15:14:32","date_gmt":"2025-11-19T13:14:32","guid":{"rendered":"https:\/\/support.withsecure.com\/?post_type=announcement&p=7247"},"modified":"2026-10-19T13:10:44","modified_gmt":"2026-10-19T10:10:44","slug":"exposure-management-synology-dsm-detections-now-available-via-ssh-scan","status":"publish","type":"announcement","link":"https:\/\/support.withsecure.com\/en\/announcements\/exposure-management-synology-dsm-detections-now-available-via-ssh-scan\/","title":{"rendered":"Exposure Management: Synology DSM Detections now available via SSH Scan"},"content":{"rendered":"

Update 2025-11-28<\/strong>: SSH scanning for Synology DSM is now available to all customers. SSH scanning is now the only reliable<\/strong> way to detect the DSM version in use.<\/p>\n

Summary<\/strong><\/h2>\n

We would like to inform our partners and customers about an important change in how Synology DSM<\/strong> vulnerabilities are detected in WithSecure\u2122 Elements Exposure Management and WithSecure\u2122 Elements Vulnerability Management<\/strong>.<\/p>\n

Following recent changes from Synology<\/strong>, their devices no longer report the full DSM version<\/strong> via the unauthenticated network banner. This impacts detection reliability for unauthenticated scans.<\/p>\n

Change Details<\/strong><\/h2>\n

What changed:<\/strong><\/p>\n

    \n
  • Synology has stopped exposing full DSM version information<\/strong> in its network banner (previously available without authentication).<\/li>\n
  • This change caused inaccurate version recognition for versions with minor release number and potential false positives<\/strong> in EVM\/XM.<\/li>\n<\/ul>\n

    Action taken:<\/strong><\/p>\n

      \n
    • To maintain scan integrity, unauthenticated DSM version-based plugins have been temporarily disabled for undetectable versions<\/strong>.<\/li>\n
    • This impacts approximately 70% of Synology DSM versions<\/strong>.<\/li>\n
    • For the remaining 30%<\/strong>, unauthenticated detections continue to operate normally.<\/li>\n<\/ul>\n

      Upcoming Improvement: SSH Authenticated Scanning for DSM<\/strong><\/h2>\n

      We are actively working on an enhancement to extend SSH authenticated scanning<\/strong> to fully support Synology DSM<\/strong>.This will restore precise version and vulnerability detection through secure, authenticated methods.<\/p>\n

      Estimated delivery:<\/strong><\/p>\n

      We anticipate that the improvement will be deployed by the first week of December 2025. We will update this article once the deployment has been made.<\/p>\n

      What Customers Should Do<\/strong><\/p>\n

      Once the new SSH scanning capability becomes available:<\/p>\n

        \n
      1. Enable SSH access<\/strong> on Synology DSM devices via the DSM web interface.<\/li>\n
      2. Update your scan configurations<\/strong> to use Authenticated System Scan with SSH<\/strong> credentials\/keys.<\/li>\n
      3. Verify permissions and connectivity to ensure full coverage.<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

        Update 2025-11-28: SSH scanning for Synology DSM is now available to all customers. SSH scanning is now the only reliable way to detect the DSM version in use. Summary We…<\/p>\n","protected":false},"template":"","announcement_category":[142],"class_list":["post-7247","announcement","type-announcement","status-publish","hentry"],"acf":{"source_system":"vanilla-import","import_hash":"2cc65d39f4182f15b388e85e1650c6b49ed97e30","vanilla_article_id":32740,"legacy_author":"AndyF_WS","vanilla_url":"https:\/\/community.withsecure.com\/announcements-en\/kb\/articles\/32740-exposure-management-synology-dsm-detections-now-available-via-ssh-scan","vanilla_category_id":142,"machine_translated":false},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement"}],"about":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/types\/announcement"}],"version-history":[{"count":1,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7247\/revisions"}],"predecessor-version":[{"id":8761,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement\/7247\/revisions\/8761"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=7247"}],"wp:term":[{"taxonomy":"announcement_category","embeddable":true,"href":"https:\/\/support.withsecure.com\/en\/wp-json\/wp\/v2\/announcement_category?post=7247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}