Back to Database
Status published
Medium
CVE-2015-2851
client_chown in the sync client in Synology Cloud Station 1.1-2291...
Vulnerability Description
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-2851
Credits & Attribution
No credits recorded in the NVD database.
References
More from synology
View All →CVE-2017-9554
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager...
Medium
5.3
CVE-2017-9553
A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM)...
High
7.5
CVE-2017-16768
Cross-site scripting (XSS) vulnerability in User Policy editor in Synology...
Medium
4.8
CVE-2017-12077
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager...
Medium
4.9
CVE-2017-12076
Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology DiskStation (DSM)...
Medium
4.9
Affected Vendor
synology
View all reports →Affected Software
cloud station
Vulnerable Versions:
1.1-2291, 2.0-2291, 2.0-2402, 2.1-2561, 2.1-2570, 2.1-2577, 3.0-3005, 3.0-3103, 3.0-3108, 3.0-3109, 3.0-3111, 3.1-3317, 3.1-3320
Timeline
Official Publish:
May 30th, 2015
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.