CVE-2017-9554 PoC — Synology DiskStation Manager 信息泄露漏洞

Source

https://github.com/Ez0-yf/CVE-2017-9554-Exploit-Tool

Associated Vulnerability

Title: Synology DiskStation Manager 信息泄露漏洞 (CVE-2017-9554)
Description:An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to enumerate valid usernames via unspecified vectors.

Description

CVE-2017-9554 Exploit Tool

Readme

# CVE-2017-9554-Exploit-Tool
CVE-2017-9554 Exploit Tool

Synology DiskStation Manager (DSM) < 6.1.3-15152 - 'forget_passwd.cgi' User Enumeration EXPLOIT Tool  
Exploit Author : Steve Kaun  
Exploit Tool Author : Ez0-yf  
Vendor Homepage : https://www.synology.com  
Version : Before 6.1.3-15152  
CVE : CVE-2017-9554

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →