> ## Content Index
> Fetch the complete content index at: https://globalfeed.ai/llms.txt
> Use this file to discover other available public pages before exploring further.

# Which DSM version is your Synology NAS running?
- URL: https://globalfeed.ai/en/which-dsm-version-is-your-synology-nas-running/
- Published: 2026-11-03T21:42:21.000Z
- Updated: 2026-11-03T21:42:21.000Z
- Description: Synology urged users to update after ransomware attacks on NAS devices running outdated DSM. Which version you need and five quick steps.
- Author: GlobalFeed Editor
- Tags: Synology, cybersecurity, NAS, ransomware, guide, x-Synology, dil-en, elle

Photo archives at home, shared folders at the office, backups at small firms: Synology NAS boxes quietly run under a lot of desks. In a [statement](https://www.synology.com/en-global/company/news/article/C3RB3R/Synology%20urges%20users%20to%20update%20DSM%20following%20ransomware%20attacks%20on%20outdated%20DSM%20versions?ref=globalfeed.ai) on 29 October, Synology said attackers are targeting devices running outdated DSM versions, aiming to encrypt data and demand a ransom. The company says the flaw being used was patched in December 2024, so the door is already shut for anyone whose device is up to date. Here is what is happening, which version your device should be on and the steps that take a few minutes.

## What is happening

According to Synology, attackers are exploiting a vulnerability patched in December 2024 to get into devices on old DSM versions. DSM is the operating system of Synology devices. Synology urges all users to update immediately and to turn on automatic updates. The statement gives no number of affected devices or regions.

According to [The Hacker News](https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html?ref=globalfeed.ai), the ransomware is called C3RB3R. It adds a .L0CK3D extension to the files it encrypts and leaves a note named read-me3.txt in each folder. Hong Kong’s computer emergency team [HKCERT](https://www.hkcert.org/security-bulletin/security-alert-ransomware-attacks-targeting-synology-nas-devices%5F20261102?ref=globalfeed.ai) issued an alert on 2 November and noted that installing updates does not decrypt files that were already encrypted. No free decryptor has been published so far.

## Which flaw

Synology’s statement links only to [Synology-SA-24:20](https://www.synology.com/en-global/security/advisory/Synology%5FSA%5F24%5F20?ref=globalfeed.ai), the advisory published in November 2024 for flaws found at Pwn2Own. The most serious is CVE-2024-10441, a remote code execution bug in the system plugin daemon that needs no login and is rated 9.8 out of 10\. The advisory lists these fixed versions:

- DSM 7.2.2: 7.2.2-72806-1 or later
- DSM 7.2.1: 7.2.1-69057-6 or later
- DSM 7.2: 7.2-64570-4 or later
- DSM 7.1: 7.1.1-42962-7 or later
- DSM 6.2: 6.2.4-25556-8 or later

Security firm 360, as reported by The Hacker News, says the attackers used two flaws Synology fixed in September 2026, CVE-2026-13684 and CVE-2026-13639\. Those are covered in [Synology-SA-26:13](https://www.synology.com/en-global/security/advisory/Synology%5FSA%5F26%5F13?ref=globalfeed.ai) and fixed in DSM 7.4-90075, 7.3.2-86009-4, 7.2.2-72806-9 and 7.2.1-69057-12\. The safest move is therefore to install the latest update for your device’s DSM branch, which closes the flaws in both advisories at once.

## Five steps for your device

Think of it as changing a front-door lock: the new lock has been ready for almost two years, it just needs fitting.

- **Check your version:** in DSM, Control Panel, Info Center shows the DSM version. Compare it with the numbers above.
- **Update:** install the latest DSM update from Control Panel, Update & Restore, and update packages in Package Center.
- **Turn on automatic updates:** this is the step Synology specifically recommends, so the next patch arrives without you having to remember.
- **Keep the admin page off the internet:** remove any router port forward to DSM’s management port, and use a VPN if you need remote access.
- **Keep backups off the device:** a backup on the same NAS may not escape encryption. A versioned copy on an external drive or another location is the best insurance.

End-of-life versions such as DSM 6.2 no longer receive regular updates. If an older model is still on that version, disconnecting it from the internet entirely is the quickest safe option. Synology’s message is short and clear: an up-to-date DSM is the most effective protection against this wave.

Cover photo: [DYVER, Wikimedia Commons](https://commons.wikimedia.org/wiki/File:Synology%5FDisk%5FStation%5FDS223J%5F-%5FNAS-Server.jpg?ref=globalfeed.ai), CC BY-SA 4.0.

Sources: [Synology statement](https://www.synology.com/en-global/company/news/article/C3RB3R/Synology%20urges%20users%20to%20update%20DSM%20following%20ransomware%20attacks%20on%20outdated%20DSM%20versions?ref=globalfeed.ai), [Synology-SA-24:20](https://www.synology.com/en-global/security/advisory/Synology%5FSA%5F24%5F20?ref=globalfeed.ai), [Synology-SA-26:13](https://www.synology.com/en-global/security/advisory/Synology%5FSA%5F26%5F13?ref=globalfeed.ai), [The Hacker News](https://thehackernews.com/2026/11/synology-nas-devices-targeted-in.html?ref=globalfeed.ai), [HKCERT](https://www.hkcert.org/security-bulletin/security-alert-ransomware-attacks-targeting-synology-nas-devices%5F20261102?ref=globalfeed.ai)