PT-2017-11783 · Synology · Synology Cloud Station Drive

Publicado 2017-08-31 · Atualizado 2019-10-09 · CVE-2017-11158

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synology Cloud Station Drive versions prior to 4.2.5-4396

Description The issue concerns untrusted search path vulnerabilities in the installer of Synology Cloud Station Drive on Windows. These vulnerabilities allow local attackers to execute arbitrary code and conduct DLL hijacking attacks by placing a Trojan horse file, such as shfolder.dll, ntmarta.dll, secur32.dll, or dwmapi.dll, in the current working directory.

Recommendations For versions prior to 4.2.5-4396, update to version 4.2.5-4396 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer to minimize the risk of exploitation. Avoid placing untrusted files in the current working directory to prevent DLL hijacking attacks.

Correção

Untrusted Search Path

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-426

CWE-427

Identificadores relacionados

CVE-2017-11158

Produtos afetados

Synology Cloud Station Drive

Referências · 3

• https://osv.dev/vulnerability/CVE-2017-11158 · Aviso do Fabricante
• https://synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11158 · Nota de Segurança