| Package | Affected versions | Patched versions |
|---|---|---|
| download station | = 3.2-2295= 3.3-2382= 3.3-2383= 3.3-2386= 3.4-2477= 3.4-2478= 3.4-2480= 3.4-2485= 3.4-2486= 3.4-2489= 3.4-2490= 3.4-2514= 3.4-2555= 3.4-2557= 3.4-2558= 3.5-2638= 3.5-2705= 3.5-2706= 3.5-2955= 3.5-2956= 3.5-2962= 3.5-2963= 3.5-2967= 3.5-2968= 3.5-2970= 3.5-2973= 3.5-2980= 3.5-2982= 3.8.0-3416= 3.8.1-3420= 3.8.2-3455= 3.8.3-3458= 3.8.4-3468 |
Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free