CVE-2016-10323

7.8 highEPSS 0.6%

High (7.8) in synology photo station. EPSS 0.6% chance of exploitation in the next 30 days.

Synology Photo Station before 6.3-2958 allows local users to gain privileges by leveraging setuid execution of a "synophoto_dsm_user --copy-no-ea" command.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2017-04-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

synology:photo_station

References

http://seclists.org/oss-sec/2016/q1/236
https://www.synology.com/en-us/releaseNote/PhotoStation
http://seclists.org/oss-sec/2016/q1/236
https://www.synology.com/en-us/releaseNote/PhotoStation

Check your stack JSON