Unscored severity · published May 30, 2015
CVE-2015-2851
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain…
–
CVSS
0.8%
EPSS
No
On KEV
Description
client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cloud Station · Synology
1.1-2291; 2.0-2291; 2.0-2402; 2.1-2561; 2.1-2570; 2.1-2577; +7 more · source: NVD