[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff6xQiQUDCoDbo2ENL-BirZTqUtdaq6CF9WX252wqkko":3,"g5a-risk:CVE-2017-11156":275},{"success":4,"data":5,"meta":273},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":44,"affectedProducts":45,"affectedProductsCount":147,"references":148,"referencesCount":156,"weaknesses":157,"weaknessesCount":156,"isActivelyExploited":172,"cisaInfo":15,"otxData":15,"relatedBlogPosts":173,"seoMetadata":174,"configurations":199,"relatedVendorCves":271,"notableEvents":272},"CVE-2017-11156","What is CVE-2017-11156?","Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui\u002Fdlm\u002Fbtsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.","Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui\u002Fdlm\u002Fbtsearch directory, which allows remote aut...","2017-08-14T19:29:01.147","2025-04-20T01:37:25.86",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","NETWORK","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.02302,[43,41,41,41,41,41,41],0.02212,"High",[46,51,54,57,60,63,66,69,72,75,78,81,84,87,90,93,96,99,102,105,108,111,114,117,120,123,126,129,132,135,138,141,144],{"vendor":47,"product":48,"version":49,"criteria":50,"vulnerable":4},"synology","download_station","3.2-2295","cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":52,"criteria":53,"vulnerable":4},"3.3-2382","cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":55,"criteria":56,"vulnerable":4},"3.3-2383","cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":58,"criteria":59,"vulnerable":4},"3.3-2386","cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":61,"criteria":62,"vulnerable":4},"3.4-2477","cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":64,"criteria":65,"vulnerable":4},"3.4-2478","cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":67,"criteria":68,"vulnerable":4},"3.4-2480","cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":70,"criteria":71,"vulnerable":4},"3.4-2485","cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":73,"criteria":74,"vulnerable":4},"3.4-2486","cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":76,"criteria":77,"vulnerable":4},"3.4-2489","cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":79,"criteria":80,"vulnerable":4},"3.4-2490","cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":82,"criteria":83,"vulnerable":4},"3.4-2514","cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":85,"criteria":86,"vulnerable":4},"3.4-2555","cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":88,"criteria":89,"vulnerable":4},"3.4-2557","cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":91,"criteria":92,"vulnerable":4},"3.4-2558","cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":94,"criteria":95,"vulnerable":4},"3.5-2638","cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":97,"criteria":98,"vulnerable":4},"3.5-2705","cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":100,"criteria":101,"vulnerable":4},"3.5-2706","cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":103,"criteria":104,"vulnerable":4},"3.5-2955","cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":106,"criteria":107,"vulnerable":4},"3.5-2956","cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":109,"criteria":110,"vulnerable":4},"3.5-2962","cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":112,"criteria":113,"vulnerable":4},"3.5-2963","cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":115,"criteria":116,"vulnerable":4},"3.5-2967","cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":118,"criteria":119,"vulnerable":4},"3.5-2968","cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":121,"criteria":122,"vulnerable":4},"3.5-2970","cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":124,"criteria":125,"vulnerable":4},"3.5-2973","cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":127,"criteria":128,"vulnerable":4},"3.5-2980","cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":130,"criteria":131,"vulnerable":4},"3.5-2982","cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":133,"criteria":134,"vulnerable":4},"3.8.0-3416","cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":136,"criteria":137,"vulnerable":4},"3.8.1-3420","cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":139,"criteria":140,"vulnerable":4},"3.8.2-3455","cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":142,"criteria":143,"vulnerable":4},"3.8.3-3458","cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*",{"vendor":47,"product":48,"version":145,"criteria":146,"vulnerable":4},"3.8.4-3468","cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*",33,[149,154],{"url":150,"source":151,"tags":152},"https:\u002F\u002Fwww.synology.com\u002Fen-global\u002Fsupport\u002Fsecurity\u002FSynology_SA_17_28_Download_Station","Synology",[153],"Vendor Advisory",{"url":150,"source":151,"tags":155},[153],2,[158,166],{"id":159,"name":160,"description":161,"extendedDescription":162,"status":163,"abstraction":164,"structure":165},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",{"id":167,"name":168,"description":169,"extendedDescription":170,"status":163,"abstraction":171,"structure":165},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.","Class",false,[],{"title":175,"metaDescription":176,"keywords":177,"canonicalUrl":178,"structuredData":179},"What is CVE-2017-11156? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-11156, a high severity cyber security vulnerability from 2017. Synology Download Station 3.8.x before 3.8.5-3475 and 3.x b...","CVE-2017-11156, CVE-2017-11156 vulnerability, CVE-2017-11156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, synology security, download_station vulnerability","\u002Fwhat-is\u002Fcve-2017-11156",{"@context":180,"@type":181,"headline":175,"description":176,"datePublished":10,"dateModified":11,"author":182,"publisher":186,"about":190,"mainEntityOfPage":194,"articleSection":197,"keywords":198},"https:\u002F\u002Fschema.org","TechArticle",{"@type":183,"name":184,"url":185},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":183,"name":184,"url":185,"logo":187},{"@type":188,"url":189},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":191,"name":6,"description":192,"additionalType":193},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":195,"@id":196},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-11156","Cybersecurity","CVE-2017-11156, CVE-2017-11156 vulnerability, CVE-2017-11156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[200],{"Operator":15,"Negate":15,"Nodes":201},[202],{"Operator":203,"Negate":15,"CPEMatch":204},"OR",[205,207,209,211,213,215,217,219,221,223,225,227,229,231,233,235,237,239,241,243,245,247,249,251,253,255,257,259,261,263,265,267,269],{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":206,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"388EC850-91FB-495E-8CC1-E3B6468A7D05",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":208,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A0EE8CB0-5D39-4361-B17F-D073377B8E22",{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":210,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EEF5E40E-AFF1-4548-8F80-61D11A658C44",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":212,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"87DAD7D7-C695-4C6A-9674-199C61604B35",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":214,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47302F69-2ED0-431E-82EE-16942C8B14B0",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"74EF711B-10DA-4356-8ED0-FFF08BDB0A7D",{"Vulnerable":4,"Criteria":68,"MatchCriteriaID":218,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"400A6164-B4D7-4988-B16A-E3CFABDB995D",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":220,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9D5F75FA-B343-4513-B92C-5F3D89DEB2AE",{"Vulnerable":4,"Criteria":74,"MatchCriteriaID":222,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8C5D8FDA-BE01-440A-93F5-0314C15B345C",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"043E910E-9129-43C9-B27F-0A8C6AC9D44A",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD3DD08D-4025-424B-8B6D-6F45F64BA1BD",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1B4ED375-025B-4C51-B8B4-DDAFE550C7E4",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F2FA562D-F3C5-43D3-8FF2-5C3BC84B23C6",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":232,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3C3688F1-5EFC-4611-9976-85EAF9595255",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":234,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"99FBB132-BF8D-4B95-A32A-12B40E85C1FA",{"Vulnerable":4,"Criteria":95,"MatchCriteriaID":236,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1FC3C6CE-9E0F-499F-B3AC-2D9F21289670",{"Vulnerable":4,"Criteria":98,"MatchCriteriaID":238,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B93E493C-1889-40B3-B8C7-0F4D0B6B72DE",{"Vulnerable":4,"Criteria":101,"MatchCriteriaID":240,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4712A752-7F18-45B0-A333-287734E6B46B",{"Vulnerable":4,"Criteria":104,"MatchCriteriaID":242,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"971F5675-E834-48FE-AED6-0D06E554FEED",{"Vulnerable":4,"Criteria":107,"MatchCriteriaID":244,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"34FFE8AC-9E8B-4435-B6A7-B876AFF4D669",{"Vulnerable":4,"Criteria":110,"MatchCriteriaID":246,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD9AD47A-71CA-4E9F-B4BB-49C664BFFDAE",{"Vulnerable":4,"Criteria":113,"MatchCriteriaID":248,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"98D5E19B-A34F-4FD1-AC8E-005E6F565ED6",{"Vulnerable":4,"Criteria":116,"MatchCriteriaID":250,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"858B2972-78D9-496D-B61D-BB38F5CC8B46",{"Vulnerable":4,"Criteria":119,"MatchCriteriaID":252,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"645A9A0B-F0D1-4122-A5D4-E12D32AA8633",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":254,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CD9E764-07E4-44F0-B268-7BFFE1E91F78",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":256,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"61DFFD31-8496-4B23-8AA0-05D895A4FF54",{"Vulnerable":4,"Criteria":128,"MatchCriteriaID":258,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFB54B93-7F72-4797-8620-552EB9971B0B",{"Vulnerable":4,"Criteria":131,"MatchCriteriaID":260,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"45D6CEC0-9BAE-4627-A57A-5DBA81A39AF3",{"Vulnerable":4,"Criteria":134,"MatchCriteriaID":262,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"27981034-F4ED-47B7-9A87-D5EAD8BB4EDA",{"Vulnerable":4,"Criteria":137,"MatchCriteriaID":264,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8E525F0C-1D37-447D-A688-6FD87822889C",{"Vulnerable":4,"Criteria":140,"MatchCriteriaID":266,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B3240461-598E-4C41-9234-400AAAEE32B9",{"Vulnerable":4,"Criteria":143,"MatchCriteriaID":268,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5D36302B-9478-4348-8059-D89BEC858F87",{"Vulnerable":4,"Criteria":146,"MatchCriteriaID":270,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFFA7620-E000-448D-BEC2-9EEC47649334",[],[],{"lastModified":11,"cacheTime":274,"version":32},1793208046115,{"score":276,"band":277,"action":278,"scoredAt":279},46,"Medium","Plan remediation","2026-07-01T10:21:06.247885+00:00"]