[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGW5Yw9wqiojClAVk94Wk0WQJkPkpN9EURL7tOJHsccs":3,"g5a-risk:CVE-2017-11149":268},{"success":4,"data":5,"meta":266},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":15,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":145,"references":146,"referencesCount":154,"weaknesses":155,"weaknessesCount":164,"isActivelyExploited":165,"cisaInfo":15,"otxData":15,"relatedBlogPosts":166,"seoMetadata":167,"configurations":192,"relatedVendorCves":264,"notableEvents":265},"CVE-2017-11149","What is CVE-2017-11149?","Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authenticated users to download arbitrary local files via crafted URI.","Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote aut...","2017-08-14T19:29:00.77","2025-04-20T01:37:25.86",6.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","MEDIUM",2.8,3.6,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":27,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,8,2.9,0.01599,[40,40,40,40,40,40,40],"Medium",[44,49,52,55,58,61,64,67,70,73,76,79,82,85,88,91,94,97,100,103,106,109,112,115,118,121,124,127,130,133,136,139,142],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"synology","download_station","3.2-2295","cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":50,"criteria":51,"vulnerable":4},"3.3-2382","cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":53,"criteria":54,"vulnerable":4},"3.3-2383","cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":56,"criteria":57,"vulnerable":4},"3.3-2386","cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":59,"criteria":60,"vulnerable":4},"3.4-2477","cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":62,"criteria":63,"vulnerable":4},"3.4-2478","cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":65,"criteria":66,"vulnerable":4},"3.4-2480","cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":68,"criteria":69,"vulnerable":4},"3.4-2485","cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":71,"criteria":72,"vulnerable":4},"3.4-2486","cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":74,"criteria":75,"vulnerable":4},"3.4-2489","cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":77,"criteria":78,"vulnerable":4},"3.4-2490","cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":80,"criteria":81,"vulnerable":4},"3.4-2514","cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":83,"criteria":84,"vulnerable":4},"3.4-2555","cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":86,"criteria":87,"vulnerable":4},"3.4-2557","cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":89,"criteria":90,"vulnerable":4},"3.4-2558","cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":92,"criteria":93,"vulnerable":4},"3.5-2638","cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":95,"criteria":96,"vulnerable":4},"3.5-2705","cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":98,"criteria":99,"vulnerable":4},"3.5-2706","cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":101,"criteria":102,"vulnerable":4},"3.5-2955","cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":104,"criteria":105,"vulnerable":4},"3.5-2956","cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":107,"criteria":108,"vulnerable":4},"3.5-2962","cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":110,"criteria":111,"vulnerable":4},"3.5-2963","cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":113,"criteria":114,"vulnerable":4},"3.5-2967","cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":116,"criteria":117,"vulnerable":4},"3.5-2968","cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":119,"criteria":120,"vulnerable":4},"3.5-2970","cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":122,"criteria":123,"vulnerable":4},"3.5-2973","cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":125,"criteria":126,"vulnerable":4},"3.5-2980","cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":128,"criteria":129,"vulnerable":4},"3.5-2982","cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":131,"criteria":132,"vulnerable":4},"3.8.0-3416","cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":134,"criteria":135,"vulnerable":4},"3.8.1-3420","cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":137,"criteria":138,"vulnerable":4},"3.8.2-3455","cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":140,"criteria":141,"vulnerable":4},"3.8.3-3458","cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*",{"vendor":45,"product":46,"version":143,"criteria":144,"vulnerable":4},"3.8.4-3468","cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*",33,[147,152],{"url":148,"source":149,"tags":150},"https:\u002F\u002Fwww.synology.com\u002Fen-global\u002Fsupport\u002Fsecurity\u002FSynology_SA_17_28_Download_Station","Synology",[151],"Vendor Advisory",{"url":148,"source":149,"tags":153},[151],2,[156],{"id":157,"name":158,"description":159,"extendedDescription":160,"status":161,"abstraction":162,"structure":163},"CWE-918","Server-Side Request Forgery (SSRF)","The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","By providing URLs to unexpected hosts or ports, attackers can make it appear that the server is sending the request, possibly bypassing access controls such as firewalls that prevent the attackers from accessing the URLs directly. The server can be used as a proxy to conduct port scanning of hosts in internal networks, use other URLs such as that can access documents on the system (using file:\u002F\u002F), or use other protocols such as gopher:\u002F\u002F or tftp:\u002F\u002F, which may provide greater control over the contents of requests.","Incomplete","Base","Simple",1,false,[],{"title":168,"metaDescription":169,"keywords":170,"canonicalUrl":171,"structuredData":172},"What is CVE-2017-11149? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-11149, a medium severity cyber security vulnerability from 2017. Server-side request forgery (SSRF) vulnerability in Downl...","CVE-2017-11149, CVE-2017-11149 vulnerability, CVE-2017-11149 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, synology security, download_station vulnerability","\u002Fwhat-is\u002Fcve-2017-11149",{"@context":173,"@type":174,"headline":168,"description":169,"datePublished":10,"dateModified":11,"author":175,"publisher":179,"about":183,"mainEntityOfPage":187,"articleSection":190,"keywords":191},"https:\u002F\u002Fschema.org","TechArticle",{"@type":176,"name":177,"url":178},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":176,"name":177,"url":178,"logo":180},{"@type":181,"url":182},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":184,"name":6,"description":185,"additionalType":186},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":188,"@id":189},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-11149","Cybersecurity","CVE-2017-11149, CVE-2017-11149 vulnerability, CVE-2017-11149 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[193],{"Operator":15,"Negate":15,"Nodes":194},[195],{"Operator":196,"Negate":15,"CPEMatch":197},"OR",[198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,260,262],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"388EC850-91FB-495E-8CC1-E3B6468A7D05",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":201,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A0EE8CB0-5D39-4361-B17F-D073377B8E22",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":203,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EEF5E40E-AFF1-4548-8F80-61D11A658C44",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"87DAD7D7-C695-4C6A-9674-199C61604B35",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":207,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47302F69-2ED0-431E-82EE-16942C8B14B0",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":209,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"74EF711B-10DA-4356-8ED0-FFF08BDB0A7D",{"Vulnerable":4,"Criteria":66,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"400A6164-B4D7-4988-B16A-E3CFABDB995D",{"Vulnerable":4,"Criteria":69,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9D5F75FA-B343-4513-B92C-5F3D89DEB2AE",{"Vulnerable":4,"Criteria":72,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8C5D8FDA-BE01-440A-93F5-0314C15B345C",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"043E910E-9129-43C9-B27F-0A8C6AC9D44A",{"Vulnerable":4,"Criteria":78,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD3DD08D-4025-424B-8B6D-6F45F64BA1BD",{"Vulnerable":4,"Criteria":81,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1B4ED375-025B-4C51-B8B4-DDAFE550C7E4",{"Vulnerable":4,"Criteria":84,"MatchCriteriaID":223,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F2FA562D-F3C5-43D3-8FF2-5C3BC84B23C6",{"Vulnerable":4,"Criteria":87,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3C3688F1-5EFC-4611-9976-85EAF9595255",{"Vulnerable":4,"Criteria":90,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"99FBB132-BF8D-4B95-A32A-12B40E85C1FA",{"Vulnerable":4,"Criteria":93,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1FC3C6CE-9E0F-499F-B3AC-2D9F21289670",{"Vulnerable":4,"Criteria":96,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B93E493C-1889-40B3-B8C7-0F4D0B6B72DE",{"Vulnerable":4,"Criteria":99,"MatchCriteriaID":233,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4712A752-7F18-45B0-A333-287734E6B46B",{"Vulnerable":4,"Criteria":102,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"971F5675-E834-48FE-AED6-0D06E554FEED",{"Vulnerable":4,"Criteria":105,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"34FFE8AC-9E8B-4435-B6A7-B876AFF4D669",{"Vulnerable":4,"Criteria":108,"MatchCriteriaID":239,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD9AD47A-71CA-4E9F-B4BB-49C664BFFDAE",{"Vulnerable":4,"Criteria":111,"MatchCriteriaID":241,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"98D5E19B-A34F-4FD1-AC8E-005E6F565ED6",{"Vulnerable":4,"Criteria":114,"MatchCriteriaID":243,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"858B2972-78D9-496D-B61D-BB38F5CC8B46",{"Vulnerable":4,"Criteria":117,"MatchCriteriaID":245,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"645A9A0B-F0D1-4122-A5D4-E12D32AA8633",{"Vulnerable":4,"Criteria":120,"MatchCriteriaID":247,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CD9E764-07E4-44F0-B268-7BFFE1E91F78",{"Vulnerable":4,"Criteria":123,"MatchCriteriaID":249,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"61DFFD31-8496-4B23-8AA0-05D895A4FF54",{"Vulnerable":4,"Criteria":126,"MatchCriteriaID":251,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFB54B93-7F72-4797-8620-552EB9971B0B",{"Vulnerable":4,"Criteria":129,"MatchCriteriaID":253,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"45D6CEC0-9BAE-4627-A57A-5DBA81A39AF3",{"Vulnerable":4,"Criteria":132,"MatchCriteriaID":255,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"27981034-F4ED-47B7-9A87-D5EAD8BB4EDA",{"Vulnerable":4,"Criteria":135,"MatchCriteriaID":257,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8E525F0C-1D37-447D-A688-6FD87822889C",{"Vulnerable":4,"Criteria":138,"MatchCriteriaID":259,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B3240461-598E-4C41-9234-400AAAEE32B9",{"Vulnerable":4,"Criteria":141,"MatchCriteriaID":261,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5D36302B-9478-4348-8059-D89BEC858F87",{"Vulnerable":4,"Criteria":144,"MatchCriteriaID":263,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFFA7620-E000-448D-BEC2-9EEC47649334",[],[],{"lastModified":11,"cacheTime":267,"version":33},1793228679063,{"score":269,"band":270,"action":271,"scoredAt":272},24,"Low","Monitor","2026-10-28T06:42:22.037483+00:00"]