Description
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://www.synology.com/en-global/support/security/Photo_Station_CVE_2017_9552
Issue Tracking, Third Party Advisory x_refsource_misc
http://blog.crozat.net/2017/06/synology-photostation-password-vulnerabilty.html
Scores
CVSS v3
7.8
EPSS
0.0004
EPSS Percentile
13.6%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
CWE-522
Status
published
Products (25)
synology/photo_station
6.0-2528
synology/photo_station
6.0-2636
synology/photo_station
6.0-2638
synology/photo_station
6.0-2639
synology/photo_station
6.0-2640
synology/photo_station
6.3-2944
synology/photo_station
6.3-2958
synology/photo_station
6.3-2960
synology/photo_station
6.3-2962
synology/photo_station
6.3-2963
... and 15 more
Published
Jun 13, 2017
Tracked Since
Feb 18, 2026