CVE-2023-52945

HIGH 7.8

CVSS Score

7.8

EPSS Score

0.0%

EPSS Percentile

0th

Uncontrolled search path element vulnerability in OpenSSL DLL component in Synology BeeDrive for desktop before 1.3.2-13814 allows local users to execute arbitrary code via unspecified vectors.

CWE	CWE-427
Vendor	synology
Product	beedrive for desktop
Published	May 27, 2026
Last Updated	May 27, 2026

Stay Ahead of the Next One

Get instant alerts for synology beedrive for desktop

Be the first to know when new high vulnerabilities affecting synology beedrive for desktop are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

Synology / BeeDrive for desktop

* < 1.3.2-13814

References

NVD ↗ CVE.org ↗ EPSS Data ↗

synology.com: https://www.synology.com/en-global/security/advisory/Synology_SA_24_26

Credits

Zhao Runzi (赵润梓)