[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ff6xQiQUDCoDbo2ENL-BirZTqUtdaq6CF9WX252wqkko":3,"g5a-risk:CVE-2017-11156":274},{"success":4,"data":5,"meta":272},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":15,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":146,"references":147,"referencesCount":155,"weaknesses":156,"weaknessesCount":155,"isActivelyExploited":171,"cisaInfo":15,"otxData":15,"relatedBlogPosts":172,"seoMetadata":173,"configurations":198,"relatedVendorCves":270,"notableEvents":271},"CVE-2017-11156","What is CVE-2017-11156?","Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui\u002Fdlm\u002Fbtsearch directory, which allows remote authenticated users to execute arbitrary code by uploading an executable via unspecified vectors.","Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui\u002Fdlm\u002Fbtsearch directory, which allows remote aut...","2017-08-14T19:29:01.147","2025-04-20T01:37:25.86",7.8,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.9,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":38,"ExploitabilityScore":39,"ImpactScore":40,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":34,"AccessComplexity":23,"Authentication":35,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","NETWORK","SINGLE","PARTIAL",6.5,"MEDIUM",8,6.4,0.02302,[41,41,41,41,41,41,41],"High",[45,50,53,56,59,62,65,68,71,74,77,80,83,86,89,92,95,98,101,104,107,110,113,116,119,122,125,128,131,134,137,140,143],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"synology","download_station","3.2-2295","cpe:2.3:a:synology:download_station:3.2-2295:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"3.3-2382","cpe:2.3:a:synology:download_station:3.3-2382:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"3.3-2383","cpe:2.3:a:synology:download_station:3.3-2383:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":57,"criteria":58,"vulnerable":4},"3.3-2386","cpe:2.3:a:synology:download_station:3.3-2386:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":60,"criteria":61,"vulnerable":4},"3.4-2477","cpe:2.3:a:synology:download_station:3.4-2477:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":63,"criteria":64,"vulnerable":4},"3.4-2478","cpe:2.3:a:synology:download_station:3.4-2478:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":66,"criteria":67,"vulnerable":4},"3.4-2480","cpe:2.3:a:synology:download_station:3.4-2480:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":69,"criteria":70,"vulnerable":4},"3.4-2485","cpe:2.3:a:synology:download_station:3.4-2485:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":72,"criteria":73,"vulnerable":4},"3.4-2486","cpe:2.3:a:synology:download_station:3.4-2486:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":75,"criteria":76,"vulnerable":4},"3.4-2489","cpe:2.3:a:synology:download_station:3.4-2489:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":78,"criteria":79,"vulnerable":4},"3.4-2490","cpe:2.3:a:synology:download_station:3.4-2490:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":81,"criteria":82,"vulnerable":4},"3.4-2514","cpe:2.3:a:synology:download_station:3.4-2514:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":84,"criteria":85,"vulnerable":4},"3.4-2555","cpe:2.3:a:synology:download_station:3.4-2555:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":87,"criteria":88,"vulnerable":4},"3.4-2557","cpe:2.3:a:synology:download_station:3.4-2557:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":90,"criteria":91,"vulnerable":4},"3.4-2558","cpe:2.3:a:synology:download_station:3.4-2558:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":93,"criteria":94,"vulnerable":4},"3.5-2638","cpe:2.3:a:synology:download_station:3.5-2638:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":96,"criteria":97,"vulnerable":4},"3.5-2705","cpe:2.3:a:synology:download_station:3.5-2705:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":99,"criteria":100,"vulnerable":4},"3.5-2706","cpe:2.3:a:synology:download_station:3.5-2706:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":102,"criteria":103,"vulnerable":4},"3.5-2955","cpe:2.3:a:synology:download_station:3.5-2955:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":105,"criteria":106,"vulnerable":4},"3.5-2956","cpe:2.3:a:synology:download_station:3.5-2956:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":108,"criteria":109,"vulnerable":4},"3.5-2962","cpe:2.3:a:synology:download_station:3.5-2962:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":111,"criteria":112,"vulnerable":4},"3.5-2963","cpe:2.3:a:synology:download_station:3.5-2963:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":114,"criteria":115,"vulnerable":4},"3.5-2967","cpe:2.3:a:synology:download_station:3.5-2967:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":117,"criteria":118,"vulnerable":4},"3.5-2968","cpe:2.3:a:synology:download_station:3.5-2968:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":120,"criteria":121,"vulnerable":4},"3.5-2970","cpe:2.3:a:synology:download_station:3.5-2970:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":123,"criteria":124,"vulnerable":4},"3.5-2973","cpe:2.3:a:synology:download_station:3.5-2973:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":126,"criteria":127,"vulnerable":4},"3.5-2980","cpe:2.3:a:synology:download_station:3.5-2980:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":129,"criteria":130,"vulnerable":4},"3.5-2982","cpe:2.3:a:synology:download_station:3.5-2982:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":132,"criteria":133,"vulnerable":4},"3.8.0-3416","cpe:2.3:a:synology:download_station:3.8.0-3416:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":135,"criteria":136,"vulnerable":4},"3.8.1-3420","cpe:2.3:a:synology:download_station:3.8.1-3420:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":138,"criteria":139,"vulnerable":4},"3.8.2-3455","cpe:2.3:a:synology:download_station:3.8.2-3455:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":141,"criteria":142,"vulnerable":4},"3.8.3-3458","cpe:2.3:a:synology:download_station:3.8.3-3458:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":144,"criteria":145,"vulnerable":4},"3.8.4-3468","cpe:2.3:a:synology:download_station:3.8.4-3468:*:*:*:*:*:*:*",33,[148,153],{"url":149,"source":150,"tags":151},"https:\u002F\u002Fwww.synology.com\u002Fen-global\u002Fsupport\u002Fsecurity\u002FSynology_SA_17_28_Download_Station","Synology",[152],"Vendor Advisory",{"url":149,"source":150,"tags":154},[152],2,[157,165],{"id":158,"name":159,"description":160,"extendedDescription":161,"status":162,"abstraction":163,"structure":164},"CWE-276","Incorrect Default Permissions","During installation, installed file permissions are set to allow anyone to modify those files.","","Draft","Base","Simple",{"id":166,"name":167,"description":168,"extendedDescription":169,"status":162,"abstraction":170,"structure":164},"CWE-732","Incorrect Permission Assignment for Critical Resource","The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.","When a resource is given a permission setting that provides access to a wider range of actors than required, it could lead to the exposure of sensitive information, or the modification of that resource by unintended parties. This is especially dangerous when the resource is related to program configuration, execution, or sensitive user data. For example, consider a misconfigured storage account for the cloud that can be read or written by a public or anonymous user.","Class",false,[],{"title":174,"metaDescription":175,"keywords":176,"canonicalUrl":177,"structuredData":178},"What is CVE-2017-11156? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2017-11156, a high severity cyber security vulnerability from 2017. Synology Download Station 3.8.x before 3.8.5-3475 and 3.x b...","CVE-2017-11156, CVE-2017-11156 vulnerability, CVE-2017-11156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2017, CVSS score, exploit, patch, remediation, synology security, download_station vulnerability","\u002Fwhat-is\u002Fcve-2017-11156",{"@context":179,"@type":180,"headline":174,"description":175,"datePublished":10,"dateModified":11,"author":181,"publisher":185,"about":189,"mainEntityOfPage":193,"articleSection":196,"keywords":197},"https:\u002F\u002Fschema.org","TechArticle",{"@type":182,"name":183,"url":184},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":182,"name":183,"url":184,"logo":186},{"@type":187,"url":188},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":190,"name":6,"description":191,"additionalType":192},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":194,"@id":195},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2017-11156","Cybersecurity","CVE-2017-11156, CVE-2017-11156 vulnerability, CVE-2017-11156 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[199],{"Operator":15,"Negate":15,"Nodes":200},[201],{"Operator":202,"Negate":15,"CPEMatch":203},"OR",[204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,260,262,264,266,268],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":205,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"388EC850-91FB-495E-8CC1-E3B6468A7D05",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":207,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A0EE8CB0-5D39-4361-B17F-D073377B8E22",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":209,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"EEF5E40E-AFF1-4548-8F80-61D11A658C44",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":211,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"87DAD7D7-C695-4C6A-9674-199C61604B35",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":213,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"47302F69-2ED0-431E-82EE-16942C8B14B0",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":215,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"74EF711B-10DA-4356-8ED0-FFF08BDB0A7D",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":217,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"400A6164-B4D7-4988-B16A-E3CFABDB995D",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":219,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"9D5F75FA-B343-4513-B92C-5F3D89DEB2AE",{"Vulnerable":4,"Criteria":73,"MatchCriteriaID":221,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8C5D8FDA-BE01-440A-93F5-0314C15B345C",{"Vulnerable":4,"Criteria":76,"MatchCriteriaID":223,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"043E910E-9129-43C9-B27F-0A8C6AC9D44A",{"Vulnerable":4,"Criteria":79,"MatchCriteriaID":225,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD3DD08D-4025-424B-8B6D-6F45F64BA1BD",{"Vulnerable":4,"Criteria":82,"MatchCriteriaID":227,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1B4ED375-025B-4C51-B8B4-DDAFE550C7E4",{"Vulnerable":4,"Criteria":85,"MatchCriteriaID":229,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F2FA562D-F3C5-43D3-8FF2-5C3BC84B23C6",{"Vulnerable":4,"Criteria":88,"MatchCriteriaID":231,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"3C3688F1-5EFC-4611-9976-85EAF9595255",{"Vulnerable":4,"Criteria":91,"MatchCriteriaID":233,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"99FBB132-BF8D-4B95-A32A-12B40E85C1FA",{"Vulnerable":4,"Criteria":94,"MatchCriteriaID":235,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"1FC3C6CE-9E0F-499F-B3AC-2D9F21289670",{"Vulnerable":4,"Criteria":97,"MatchCriteriaID":237,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B93E493C-1889-40B3-B8C7-0F4D0B6B72DE",{"Vulnerable":4,"Criteria":100,"MatchCriteriaID":239,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4712A752-7F18-45B0-A333-287734E6B46B",{"Vulnerable":4,"Criteria":103,"MatchCriteriaID":241,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"971F5675-E834-48FE-AED6-0D06E554FEED",{"Vulnerable":4,"Criteria":106,"MatchCriteriaID":243,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"34FFE8AC-9E8B-4435-B6A7-B876AFF4D669",{"Vulnerable":4,"Criteria":109,"MatchCriteriaID":245,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"BD9AD47A-71CA-4E9F-B4BB-49C664BFFDAE",{"Vulnerable":4,"Criteria":112,"MatchCriteriaID":247,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"98D5E19B-A34F-4FD1-AC8E-005E6F565ED6",{"Vulnerable":4,"Criteria":115,"MatchCriteriaID":249,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"858B2972-78D9-496D-B61D-BB38F5CC8B46",{"Vulnerable":4,"Criteria":118,"MatchCriteriaID":251,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"645A9A0B-F0D1-4122-A5D4-E12D32AA8633",{"Vulnerable":4,"Criteria":121,"MatchCriteriaID":253,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4CD9E764-07E4-44F0-B268-7BFFE1E91F78",{"Vulnerable":4,"Criteria":124,"MatchCriteriaID":255,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"61DFFD31-8496-4B23-8AA0-05D895A4FF54",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":257,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFB54B93-7F72-4797-8620-552EB9971B0B",{"Vulnerable":4,"Criteria":130,"MatchCriteriaID":259,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"45D6CEC0-9BAE-4627-A57A-5DBA81A39AF3",{"Vulnerable":4,"Criteria":133,"MatchCriteriaID":261,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"27981034-F4ED-47B7-9A87-D5EAD8BB4EDA",{"Vulnerable":4,"Criteria":136,"MatchCriteriaID":263,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"8E525F0C-1D37-447D-A688-6FD87822889C",{"Vulnerable":4,"Criteria":139,"MatchCriteriaID":265,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"B3240461-598E-4C41-9234-400AAAEE32B9",{"Vulnerable":4,"Criteria":142,"MatchCriteriaID":267,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"5D36302B-9478-4348-8059-D89BEC858F87",{"Vulnerable":4,"Criteria":145,"MatchCriteriaID":269,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"AFFA7620-E000-448D-BEC2-9EEC47649334",[],[],{"lastModified":11,"cacheTime":273,"version":32},1793225466641,{"score":275,"band":276,"action":277,"scoredAt":278},46,"Medium","Plan remediation","2026-10-28T06:42:22.038577+00:00"]