Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

synology photo station 6.3-2958 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2017-9552
A design flaw in authentication in Synology Photo Station 6.0-2528 up to and including 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user ...
Synology Photo Station 6.0-2636Synology Photo Station 6.5.2-3225Synology Photo Station 6.3-2963Synology Photo Station 6.3-2962Synology Photo Station 6.0-2640Synology Photo Station 6.6.2-3346Synology Photo Station 6.3-2965Synology Photo Station 6.6.1-3346Synology Photo Station 6.3-2964Synology Photo Station 6.5.1-3223Synology Photo Station 6.5.0-3218Synology Photo Station 6.3-2944Synology Photo Station 6.0-2528Synology Photo Station 6.3-2958Synology Photo Station 6.0-2638Synology Photo Station 6.6.1-3345Synology Photo Station 6.6.0-3339Synology Photo Station 6.5.3-3226Synology Photo Station 6.3-2960Synology Photo Station 6.7.1-3419Synology Photo Station 6.4-3166Synology Photo Station 6.0-2639
7.2
CVSSv2
CVE-2016-10323
Synology Photo Station prior to 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.
Synology Photo Station
6.5
CVSSv2
CVE-2016-10322
Synology Photo Station prior to 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.
Synology Photo Station
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook