CVE-2017-15893 : Security Advisory and Response

A vulnerability related to directory traversal has been found in Synology File Station versions prior to 1.1.1-0099, allowing authenticated remote users to modify files and save them to arbitrary locations.

Understanding CVE-2017-15893

This CVE involves a directory traversal vulnerability in SYNO.FileStation.Extract in Synology File Station.

What is CVE-2017-15893?

This vulnerability allows authenticated remote users to write arbitrary files by exploiting the dest_folder_path parameter.

The Impact of CVE-2017-15893

Attackers can modify files and save them to unauthorized locations.

Technical Details of CVE-2017-15893

The technical aspects of this CVE are as follows:

Vulnerability Description

Directory traversal vulnerability in SYNO.FileStation.Extract

Affected Systems and Versions

Product: Synology File Station
Vendor: Synology
Versions Affected: before 1.1.1-0099

Exploitation Mechanism

Remote authenticated users can exploit the dest_folder_path parameter to write arbitrary files.

Mitigation and Prevention

Steps to address and prevent exploitation of CVE-2017-15893:

Immediate Steps to Take

Update Synology File Station to version 1.1.1-0099 or later.
Monitor file modifications and access logs for suspicious activities.

Long-Term Security Practices

Implement strong authentication mechanisms to prevent unauthorized access.
Regularly audit and review file permissions and access controls.

Patching and Updates

Regularly check for security updates and patches from Synology.