CVE Catalog
CVE-2017-11151
CriticalSummary
A vulnerability in synotheme_upload.php in Synology Photo Station before version 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.
Risk Assessment
This vulnerability may lead to unauthorized access to the system and potential introduction of malware, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update Synology Photo Station to the latest version to mitigate this vulnerability and implement additional security measures such as monitoring uploaded files.
Original NVD description (English source)
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logo_upload action.