CVE-2017-9554
An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.
- Affected products
- Synology Diskstation Manager
- Synology Diskstation Manager
- ≤ 6.1.1-15101-4
- Fix
- Available
- CVSS 3.0
- 5.3 MEDIUM
- EPSS
- 76.7% (100th percentile)
- Weakness
- CWE-200
- NVD status
- Modified
- Published
- 2017-07-24
CVE-2017-9554 at NVD
8 known exploits for CVE-2017-9554
Proof-of-concept code and exploit modules indexed by Sploitus
CVE-2017-9554-Exploit-Tool
Synology-DiskStation-User-Enumeration-CVE-2017-9554-
Synology Forget Password User Enumeration Scanner
Synology DiskStation Manager (DSM) < 6.1.3-15152 - forget_passwd.cgi User Enumeration
Synology DiskStation Manager (DSM) 6.1.3-15152 - forget_passwd.cgi User Enumeration
Synology DiskStation Manager (DSM) < 6.1.3-15152 - 'forget_passwd.cgi' User Enumeration
Synology DiskStation Manager (DSM) User Enumeration
Synology Forget Password User Enumeration Scanner