Approved changes feed: RSS · Atom

cpe:2.3:a:synology:photo_station:6.6.2-3346:*:*:*:*:*:*:*

part: a version: 6.6.2-3346 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductPhoto Station (3603953a-809e-5c9d-a4f3-e0adf12696c8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-9552 vulnerable 2026-06-03 14:37:41.856223 Details available
A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".
Published: 2017-06-13T13:00:00.000Z
Updated: 2024-08-05T17:11:02.282Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.