CVE-2016-10323

HIGH

Synology Photo Station < 6.3-2958 - Privilege Escalation via synophoto_dsm_user Command

Title source: llm
STIX 2.1

Description

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.

References (2)

Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://www.synology.com/en-us/releaseNote/PhotoStation
Exploit, Mailing List, Third Party Advisory x_refsource_misc
http://seclists.org/oss-sec/2016/q1/236

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 12.2%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-264
Status published
Products (1)
synology/photo_station < 6.3-2958
Published Apr 10, 2017
Tracked Since Feb 18, 2026