CVE-2015-2851

Published: May 30, 2015Modified: May 6, 2026

6.8

Vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Exploitability: 3.1 / Impact: 10.0

Source: NVD

Description

client_chown in the sync client in Synology Cloud Station 1.1-2291 through 3.1-3320 on OS X allows local users to change the ownership of arbitrary files, and consequently obtain root access, by specifying a filename.

Affected (13)

Products: Synology: Cloud Station

Synology

1 product

Cloud Station

Configuration A

13 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Synology Cloud Station	Version 1.1-2291
Synology Cloud Station	Version 2.0-2291
Synology Cloud Station	Version 2.0-2402
Synology Cloud Station	Version 2.1-2561
Synology Cloud Station	Version 2.1-2570
Synology Cloud Station	Version 2.1-2577
Synology Cloud Station	Version 3.0-3005
Synology Cloud Station	Version 3.0-3103
Synology Cloud Station	Version 3.0-3108
Synology Cloud Station	Version 3.0-3109
Synology Cloud Station	Version 3.0-3111
Synology Cloud Station	Version 3.1-3317
Synology Cloud Station	Version 3.1-3320