Lucene search

SynologyCVE-2021-29091

HistoryJun 02, 2021 - 2:15 a.m.

CVE-2021-29091

2021-06-0202:15:07

CWE-22

synology

web.nvd.nist.gov

cve

2021

29091

path traversal

synology photo station

security vulnerability

remote authentication

file management

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.

Affected configurations

Nvd

Node

synologyphoto_stationRange6.8–6.8.14-3500

VendorProductVersionCPE
synologyphoto_station*cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
synology	photo_station	*	cpe:2.3:a:synology:photo_station::::::::

CNA Affected

[
  {
    "product": "Synology Photo Station",
    "vendor": "Synology",
    "versions": [
      {
        "lessThan": "6.8.14-3500",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.synology.com/security/advisory/Synology_SA_20_20

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

26.9%

JSON

Related for CVE-2021-29091