CVE-2017-11159
CVE-2017-11159
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
23 Aug 2017Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Multiple untrusted search path vulnerabilities in installer in Synology Photo Station Uploader before 1.4.2-084 on Windows allows local attackers to execute arbitrary code and conduct DLL hijacking attack via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.
Affected products
Synology · Photo Station UploaderWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →