Is CVE-2010-3684 being actively exploited?

CVE-2010-3684 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2010-3684?

CVE-2010-3684 has a CVSS 2.0 base score of 2.1 (LOW).

CVE-2010-3684

LOW · CVSS 2.1EPSS 0.3%EU EUVD

The FTP authentication module in Synology Disk Station 2.x logs passwords to the web application interface in cases of incorrect login attempts, which allows local users to obtain sensitive information by reading a log, a different vulnerability than CVE-2010-2453.

Key facts

CVSS score: 2.1 (v2.0)
Severity: LOW
CVSS vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Weakness (CWE): CWE-255
EPSS score: 0.3% (24th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2010-3668)
Published: September 29, 2010
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2010-3668 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

synology / disk station ds1010+
synology / disk station ds109
synology / disk station ds110+
synology / disk station ds110j
synology / disk station ds209
synology / disk station ds210+
synology / disk station ds210j
synology / disk station ds409slim
synology / disk station ds410
synology / disk station ds410j
synology / disk station ds411+
synology / disk station ds710+
synology / dsm
synology / dsm
synology / dsm
synology / dsm
synology / dsm
synology / dsm
synology / dsm
synology / dsm
synology / dsm

References

http://www.securityfocus.com/archive/1/513970/100/0/threaded

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain