Sploitus

CVE-2017-15889

5 known exploits for CVE-2017-15889

Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.

Affected products
Synology Diskstation Manager
Synology Diskstation Manager
< 5.2-5967-5
Fix
Available
CVSS 3.0
8.8 HIGH
EPSS
73.7% (99th percentile)
Weakness
CWE-77
NVD status
Modified
Published
2017-12-04
CVE-2017-15889 at NVD
Authoritative description, scoring and affected products

5 known exploits for CVE-2017-15889

Proof-of-concept code and exploit modules indexed by Sploitus

Synology DiskStation Manager - smart.cgi Remote Command Execution Exploit
2020-05-26 metasploitZDTRuby
Synology DiskStation Manager smart.cgi - Remote Command Execution
2020-05-25 0daydb.comUNKNOWNRuby
Synology DiskStation Manager - smart.cgi Remote Command Execution (Metasploit)
2020-05-25 MetasploitEXPLOITDBRuby
Synology DiskStation Manager smart.cgi Remote Command Execution
2020-05-22 h00diePACKETSTORMRuby
Synology DiskStation Manager smart.cgi Remote Command Execution
2017-11-08 Nigusu Kassahun, h00dieMETASPLOITRuby