EDB-48514
functionalSynology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2020-05-25catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-15889US | high8.8 | Exploit | ||
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan