CVE-2021-29092: Malicious File Upload
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-29092?
CVE-2021-29092 is a vulnerability that allows remote authenticated users to execute arbitrary code via unspecified vectors in Synology Photo Station before version 6.8.14-3500.
How severe is CVE-2021-29092?
CVE-2021-29092 has a severity rating of 8.8 (high).
How does CVE-2021-29092 affect Synology Photo Station?
CVE-2021-29092 affects Synology Photo Station before version 6.8.14-3500 by allowing remote authenticated users to execute arbitrary code via unspecified vectors.
How can the unrestricted upload of file with dangerous type vulnerability be exploited?
The unrestricted upload of file with dangerous type vulnerability in Synology Photo Station before version 6.8.14-3500 can be exploited by remote authenticated users to execute arbitrary code through unspecified vectors.
Is there a fix for CVE-2021-29092?
Yes, the fix for CVE-2021-29092 is to update Synology Photo Station to version 6.8.14-3500 or later.