Cloud Station Drive

cloud_station_drive

Vendor: Synology • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-11158

1Synology

1Cloud Station Drive

May 13, 2026

Aug 31, 2017

N/A· v4

7.8 HIGH· v3

4.6 MEDIUM· v2

Multiple untrusted search path vulnerabilities in the installer in Synology Cloud Station Drive before 4.2.5-4396 on Windows allow local attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) shfolder.dll, (2) ntmarta.dll, (3) secur32.dll or (4) dwmapi.dll file in the current working directory.Show less