CVE-2017-11156

high-risk

Published 2017-08-14

Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.

Do I need to act?

-

0.86% chance of exploitation

EPSS score — low exploit probability

-

Not on CISA KEV list

No confirmed active exploitation reported to CISA

?

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

7

CVSS 7.8/10 High

LOCAL / LOW complexity

Affected Products (20)

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Download Station

Affected Vendors

Synology

References (2)

Vendor Advisory https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_S...

Vendor Advisory https://www.synology.com/en-global/support/security/Synology_SA_17_28_Download_S...

50

/ 100

high-risk

Severity 24/34 · High

Exploitability 3/34 · Minimal

Exposure 23/34 · High