CVE-2016-10329

Critical

Published: 12/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

CVE-2016-10329 is a vulnerability in login.php in Synology Photo Station before version 6.5.3-3226 that allows remote attackers to execute arbitrary code via shell metacharacters in the 'X-Forwarded-For' header.

Risk Assessment

Attackers can exploit this vulnerability to execute remote code, potentially leading to system takeover and data leakage.

Recommendation

It is recommended to update Synology Photo Station to version 6.5.3-3226 or later to mitigate this vulnerability.

Original NVD description (English source)

Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header.