CVE-2021-29092 HIGH

CVE-2021-29092

Vendor Synology
Product Synology Photo Station
Weakness CWE-434 · Unrestricted file upload
Published June 1, 2021
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Key dates

02Disclosure timeline

June 1, 2021 CVE published
September 16, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10764 Codezips Online Institute Management System save_user.php unrestricted upload CVE-2025-8120 Remote Code Execution via Unrestricted File Upload in PAD CMS CVE-2025-6327 WordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability CVE-2025-8379 Campcodes Online Hotel Reservation System edit_room.php unrestricted upload CVE-2024-5247 NETGEAR ProSAFE Network Management System UpLoadServlet Unrestricted File Upload Remote Code Execution Vulnerability