📦

cloud_station_drive

Vendor: synology

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 18 Total Indexed
Avg. EPSS 0.41% Exploit Prob.
Latest CVE CVE-2017-11158 Aug 31

Security Vulnerability Index

Page 1 / 2
7.8 CVSS
CVE-2017-11158
RCE

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.

EPSS: 0.41%