Command injection

2017-04-1018:59:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a “synophoto_dsm_user --copy-no-ea” command.

CPENameOperatorVersion
photo_stationeq< 6.3-2958

CPE	Name	Operator	Version
	photo_station	eq	< 6.3-2958

References

seclists.org/oss-sec/2016/q1/236

www.synology.com/en-us/releaseNote/PhotoStation