Synology.Photo.Station.Unauthenticated.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit an Arbitrary File Upload vulnerability in Synology Photo Station.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker may be able to exploit this to upload arbitrary files onto specific directories, leading to possible further attacks.
Affected Products
Photo Station before 6.7.3-3432 and 6.3-2967
Impact
Security Bypass: Remote attackers can bypass security features of vulnerable systems.
Recommended Actions
Refer to the vendor's advisory for updates:
https://www.synology.com/zh-tw/support/security/Synology_SA_17_34_PhotoStation
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |
Version Updates
Date | Version | Detail |
---|---|---|
2019-06-13 | 14.632 | Severity:medium:critical |