CVE-2017-15889CWE-77

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary…

published December 4, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS

—

EPSS

74%

Percentile

99.5

In the wild

Unconfirmed

What it is

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.73691 · 99.5th percentile
Weakness: CWE-77 · Improper Neutralization of Special Elements used in a Command ('Command Injection')
Published: 2017-12-04T19:00Z

EPSS history

Timeline

04 DEC 19:00Z
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary…
cvelistv5