CVE-2016-10323

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-04-10

Last modified

2024-09-16

Weaknesses

CWE-264

Affected products

• Photo Station (Synology)

References

• http://seclists.org/oss-sec/2016/q1/236
• https://www.synology.com/en-us/releaseNote/PhotoStation