CVE-2017-9552CWE-522

CVE-2017-9552: falha em Synology Photo Station

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Synology Photo Station

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 0.3%
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".
Produtos afetados
Synology · Synology Photo Station
CVEs relacionadas — Synology Photo Station

No mesmo produto, das mais perigosas para as menos.

CVE-2017-11155—CVE-2017-11155EPSS 47.4%CVE-2016-10329—CVE-2016-10329EPSS 40.8%CVE-2017-11151—CVE-2017-11151EPSS 16.3%CVE-2017-11152—CVE-2017-11152EPSS 14.6%CVE-2017-11153—CVE-2017-11153EPSS 12.2%CVE-2017-11154—CVE-2017-11154EPSS 8.6%