Critical severity9.8NVD Advisory· Published Nov 7, 2017· Updated Jun 17, 2026
CVE-2017-15887
CVE-2017-15887
Description
An improper restriction of excessive authentication attempts vulnerability in /principals in Synology CardDAV Server before 6.0.7-0085 allows remote attackers to obtain user credentials via a brute-force attack.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:synology:carddav_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:synology:carddav_server:*:*:*:*:*:*:*:*range: <6.0.7-0085
- (no CPE)range: <6.0.7-0085
- (no CPE)range: before 6.0.7-0085
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/support/security/Synology_SA_17_64_CardDAV_ServernvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.