PT-2026-43576 · Synology · Beedrive

Zhao Runzi · CVE-2023-52945 · Published 2026-05-27 · Updated 2026-05-27

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Synology BeeDrive for desktop versions prior to 1.3.2-13814

Description An uncontrolled search path element issue exists within the OpenSSL DLL component. This allows local users to execute arbitrary code through unspecified vectors. An uncontrolled search path element occurs when an application searches for a required file in a directory that can be modified by a user, potentially leading to the loading of a malicious file.

Recommendations Update to version 1.3.2-13814 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-52945

Affected Products

Beedrive

References · 3

• https://synology.com/en-global/security/advisory/Synology_SA_24_26 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-52945 · Security Note
• https://t.me/cveNotify/164814 · Telegram Post