CVE-2017-20210

Photo Station

Critical · published November 11, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

🔥 A sneaky XMR mining vulnerability lurks in Photo Station versions 5.4.1 & 5.2.7, and it could turn your server into a mining rig without your knowledge! Think of it like a restaurant that lets a random chef cook in the kitchen without checking credentials — you might end up with a surprise dish that costs more than you bargained for! If exploited, this vulnerability could allow attackers to hijack your server's resources for cryptocurrency mining, causing your performance to nose-dive and potentially racking up hefty energy bills. It's like letting a squatter turn your cozy home into their personal rave, and no one wants that kind of party!

Put simply

Think of it like a restaurant that lets a random chef cook in the kitchen without checking credentials — you might end up with a surprise dish that costs more than you bargained for! This vulnerability allows unauthorized XMR mining programs to run on compromised installations, leading to resource exhaustion and potential denial of service for legitimate users. It's a serious flaw that could drain your system's capabilities without you ever knowing it.

What to do

If exploited, this vulnerability could allow attackers to hijack your server's resources for cryptocurrency mining, causing your performance to nose-dive and potentially racking up hefty energy bills. It's like letting a squatter turn your cozy home into their personal rave, and no one wants that kind of party! Immediately upgrade to Photo Station versions 5.4.1 or 5.2.7 to patch this vulnerability. Review your server's access logs for any suspicious activity, and consider implementing resource monitoring to catch any unexpected spikes in usage. Stay vigilant! You've got this! Follow these steps, and you'll be protecting your server like a pro. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.7th percentile
Published
2025-11-11T09:45Z
EPSS history
Timeline
  • 11 NOV 09:45Z
    Photo Station
    cvelistv5