PT-2017-11783 · Synology · Synology Cloud Station Drive

Published 2017-08-31 · Updated 2019-10-09 · CVE-2017-11158

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synology Cloud Station Drive versions prior to 4.2.5-4396

Description The issue concerns untrusted search path vulnerabilities in the installer of Synology Cloud Station Drive on Windows. These vulnerabilities allow local attackers to execute arbitrary code and conduct DLL hijacking attacks by placing a Trojan horse file, such as shfolder.dll, ntmarta.dll, secur32.dll, or dwmapi.dll, in the current working directory.

Recommendations For versions prior to 4.2.5-4396, update to version 4.2.5-4396 or later to resolve the issue. As a temporary workaround, consider restricting access to the installer to minimize the risk of exploitation. Avoid placing untrusted files in the current working directory to prevent DLL hijacking attacks.

Fix

Untrusted Search Path

Uncontrolled Search Path Element

Weakness Enumeration

CWE-426

CWE-427

Related Identifiers

CVE-2017-11158

Affected Products

Synology Cloud Station Drive

References · 3

• https://osv.dev/vulnerability/CVE-2017-11158 · Vendor Advisory
• https://synology.com/en-global/support/security/Synology_SA_17_51_Cloud_Station_Drive · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-11158 · Security Note