Information Exposure Vulnerability in Synology Photo Station
CVE-2017-11155
7.5HIGH
Summary
An information exposure vulnerability exists in the index.php file of Synology Photo Station prior to versions 6.7.3-3432 and 6.3-2967. This flaw permits remote attackers to gain access to sensitive system information through unspecified methods, potentially leading to further exploitation by malicious actors. Users are encouraged to update their software to mitigate risks associated with this vulnerability.
Affected Version(s)
Synology Photo Station before 6.7.3-3432 and 6.3-2967
References
EPSS Score
35% chance of being exploited in the next 30 days.
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved