Read the docs
TI-2017-06953 Aliases CVE-2017-9552GHSA-xvv9-3xj2-h727

Insufficiently protected credentials in Synology Photo Station

Priority LOW 34CWE-522Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure, Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-522 and CWE-287.

Summary

A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc/*/cmdline".

Why it matters now

EPSS 0.00313 24th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SynologySynology Photo Station6.0-2528 through 6.7.1-3419—No fix listedCNA
  • Synology Photo Station VendorSynology Affected 6.0-2528 through 6.7.1-3419 Fixed in — No fix listed CNA

CPE configurations NVD · 24

CPEVersionsRoleVendor
cpe:2.3:a:synology:photo_station:6.0-2528:*:*:*:*:*:*:*6.0-2528VulnerableSynology
cpe:2.3:a:synology:photo_station:6.0-2636:*:*:*:*:*:*:*6.0-2636VulnerableSynology
cpe:2.3:a:synology:photo_station:6.0-2638:*:*:*:*:*:*:*6.0-2638VulnerableSynology
cpe:2.3:a:synology:photo_station:6.0-2639:*:*:*:*:*:*:*6.0-2639VulnerableSynology
cpe:2.3:a:synology:photo_station:6.0-2640:*:*:*:*:*:*:*6.0-2640VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2944:*:*:*:*:*:*:*6.3-2944VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2958:*:*:*:*:*:*:*6.3-2958VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2960:*:*:*:*:*:*:*6.3-2960VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2962:*:*:*:*:*:*:*6.3-2962VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2963:*:*:*:*:*:*:*6.3-2963VulnerableSynology
  • cpe:2.3:a:synology:photo_station:6.0-2528:*:*:*:*:*:*:* Versions 6.0-2528 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.0-2636:*:*:*:*:*:*:* Versions 6.0-2636 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.0-2638:*:*:*:*:*:*:* Versions 6.0-2638 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.0-2639:*:*:*:*:*:*:* Versions 6.0-2639 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.0-2640:*:*:*:*:*:*:* Versions 6.0-2640 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2944:*:*:*:*:*:*:* Versions 6.3-2944 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2958:*:*:*:*:*:*:* Versions 6.3-2958 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2960:*:*:*:*:*:*:* Versions 6.3-2960 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2962:*:*:*:*:*:*:* Versions 6.3-2962 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2963:*:*:*:*:*:*:* Versions 6.3-2963 Vulnerable ·Synology
Show 14 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:synology:photo_station:6.3-2964:*:*:*:*:*:*:*6.3-2964VulnerableSynology
cpe:2.3:a:synology:photo_station:6.3-2965:*:*:*:*:*:*:*6.3-2965VulnerableSynology
cpe:2.3:a:synology:photo_station:6.4-3166:*:*:*:*:*:*:*6.4-3166VulnerableSynology
cpe:2.3:a:synology:photo_station:6.5.0-3218:*:*:*:*:*:*:*6.5.0-3218VulnerableSynology
cpe:2.3:a:synology:photo_station:6.5.1-3223:*:*:*:*:*:*:*6.5.1-3223VulnerableSynology
cpe:2.3:a:synology:photo_station:6.5.2-3225:*:*:*:*:*:*:*6.5.2-3225VulnerableSynology
cpe:2.3:a:synology:photo_station:6.5.3-3226:*:*:*:*:*:*:*6.5.3-3226VulnerableSynology
cpe:2.3:a:synology:photo_station:6.6.0-3339:*:*:*:*:*:*:*6.6.0-3339VulnerableSynology
cpe:2.3:a:synology:photo_station:6.6.1-3345:*:*:*:*:*:*:*6.6.1-3345VulnerableSynology
cpe:2.3:a:synology:photo_station:6.6.1-3346:*:*:*:*:*:*:*6.6.1-3346VulnerableSynology
cpe:2.3:a:synology:photo_station:6.6.2-3346:*:*:*:*:*:*:*6.6.2-3346VulnerableSynology
cpe:2.3:a:synology:photo_station:6.6.3-3347:*:*:*:*:*:*:*6.6.3-3347VulnerableSynology
cpe:2.3:a:synology:photo_station:6.7.0-3414:*:*:*:*:*:*:*6.7.0-3414VulnerableSynology
cpe:2.3:a:synology:photo_station:6.7.1-3419:*:*:*:*:*:*:*6.7.1-3419VulnerableSynology
  • cpe:2.3:a:synology:photo_station:6.3-2964:*:*:*:*:*:*:* Versions 6.3-2964 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.3-2965:*:*:*:*:*:*:* Versions 6.3-2965 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.4-3166:*:*:*:*:*:*:* Versions 6.4-3166 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.5.0-3218:*:*:*:*:*:*:* Versions 6.5.0-3218 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.5.1-3223:*:*:*:*:*:*:* Versions 6.5.1-3223 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.5.2-3225:*:*:*:*:*:*:* Versions 6.5.2-3225 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.5.3-3226:*:*:*:*:*:*:* Versions 6.5.3-3226 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.6.0-3339:*:*:*:*:*:*:* Versions 6.6.0-3339 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.6.1-3345:*:*:*:*:*:*:* Versions 6.6.1-3345 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.6.1-3346:*:*:*:*:*:*:* Versions 6.6.1-3346 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.6.2-3346:*:*:*:*:*:*:* Versions 6.6.2-3346 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.6.3-3347:*:*:*:*:*:*:* Versions 6.6.3-3347 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.7.0-3414:*:*:*:*:*:*:* Versions 6.7.0-3414 Vulnerable ·Synology
  • cpe:2.3:a:synology:photo_station:6.7.1-3419:*:*:*:*:*:*:* Versions 6.7.1-3419 Vulnerable ·Synology

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-9552
  2. 2026-10-03 Alias added: GHSA-xvv9-3xj2-h727

References

Advisory 2

  • TI-2016-08391 Command injection in Synology Photo Station CVSS 3.0CRITICAL 9.8
  • TI-2017-08212 Information disclosure in Synology Photo Station CVSS 3.0HIGH 7.5
  • TI-2017-08208 Improper authentication in Synology Photo Station CVSS 3.0CRITICAL 9.8
  • TI-2017-08210 Deserialization of untrusted data in Synology Photo Station CVSS 3.0CRITICAL 9.8
  • TI-2017-08209 Path traversal in Synology Photo Station CVSS 3.0HIGH 7.5
  • TI-2021-09976 SQL injection in Synology Photo Station CVSS 3.1CRITICAL 9.8
See all 32 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences