PT-2017-7861

CVE-2016-10323

·

Published

2017-04-10

·

Updated

2018-06-13

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.3-2958
Description The issue allows local users to gain privileges. This is achieved by leveraging setuid execution of a command. The command in question is synophoto dsm user --copy-no-ea.
Recommendations For versions prior to 6.3-2958, update to version 6.3-2958 or later to resolve the issue.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2016-10323
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com