critical9.8Public exploit code
CVE-2017-11151
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without auth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Synology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution2017-08-08 · webapps · hardware · Verified
Impact
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Photo Station | through 6.7.2-3429 Version 6.3-2967 |