Description (CNA)
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized payload.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Synology Photo Station | affected before 6.7.3-3432 and 6.3-2967 |
CWE
CWE-502
References
- https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation
- https://www.exploit-db.com/exploits/42434/
ADP enrichment
No English description supplied.