Critical severity9.8NVD Advisory· Published Aug 8, 2017· Updated May 13, 2026
CVE-2017-11151
CVE-2017-11151
Description
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
Affected products
3- Synology/Synology Photo Stationv5Range: before 6.7.3-3432 and 6.3-2967
cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*range: <=6.7.2-3429
- cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.exploit-db.com/exploits/42434/nvdThird Party AdvisoryVDB Entry
- www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStationnvdVendor Advisory
News mentions
0No linked articles in our index yet.