Directory Traversal Vulnerability in Synology Photo Station

CVE-2016-10330

What is CVE-2016-10330?

A directory traversal vulnerability exists in the synophoto_dsm_user component of Synology Photo Station prior to version 6.5.3-3226. This vulnerability allows local users to access and write to arbitrary files through various unspecified vectors, potentially leading to unauthorized data modification and security breaches. Users are advised to update to the latest version to mitigate the risks associated with this vulnerability.

References