description: Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a crafted serialized payload.
problem types: Deserialization of Untrusted Data (CWE-502)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: before 6.7.3-3432 and 6.3-2967
}