Synology DiskStation DS925+ C2 Identity Plugin Exposed Dangerous Method Information Disclosure Vulnerability (CVE-2025-14713)

CVE number – CVE-2025-14713

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Synology DiskStation DS925+ devices.

Authentication is not required to exploit this vulnerability.

The specific flaw exists within the C2 Identity Plugin.

The issue results from an exposed dangerous function.

An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise.