CVE-2017-15889CWE-77

CVE-2017-15889: vulnerability in Synology DiskStation Manager (DSM)

Published · Updated

Follow this CVE+ Monitor DiskStation Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 74%
from disclosure to weapon903 days
Published on NVDDec 4
1st PoC+903d
metasploitNov 8
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
Affected products
Synology · DiskStation Manager (DSM)
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Synology DiskStation Manager (DSM)

In the same product, most dangerous first.

CVE-2024-50629MEDIUMCVE-2024-50629EPSS 34.8%CVE-2022-22687CRITICALCVE-2022-22687EPSS 2.4%CVE-2018-13284HIGHCVE-2018-13284EPSS 2.3%CVE-2021-27649CRITICALCVE-2021-27649EPSS 2.0%CVE-2017-12075HIGHCVE-2017-12075EPSS 1.9%CVE-2022-27624CRITICALCVE-2022-27624EPSS 1.8%