Is CVE-2023-52945 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-52945 being exploited in the wild.

How severe is CVE-2023-52945?

High severity, with a CVSS score of 7.8, published 27 May 2026.

Which products and versions are affected?

Synology BeeDrive before 1.3.2-13814.

Is there a fix for CVE-2023-52945?

A patch was published on 2024-11-26: Fixed in version 1.3.2-13814 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2023-52945 attacked?

It is attacked with local access, in a network appliance.

Am I affected by CVE-2023-52945?

Check whether you run Synology BeeDrive at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-52945: Synology BeeDrive for desktop uncontrolled search path in OpenSSL DLL

CVE-2023-52945 · Severity: high · CVSS 7.8 · Published 2026-05-27

Synology BeeDrive for desktop is a backup and file synchronization application for personal storage devices. A security flaw in how the application loads its internal OpenSSL components allows a local user on the computer to run unauthorized code. If exploited, this could lead to a full system compromise, data theft, or persistent access by an attacker who already has limited access to the machine.

Technologies: Synology BeeDrive. Vendors: Synology.

Quick answers

Is CVE-2023-52945 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-52945 being exploited in the wild.
How severe is CVE-2023-52945?: High severity, with a CVSS score of 7.8, published 27 May 2026.
Which products and versions are affected?: Synology BeeDrive before 1.3.2-13814.
Is there a fix for CVE-2023-52945?: A patch was published on 2024-11-26: Fixed in version 1.3.2-13814 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2023-52945 attacked?: It is attacked with local access, in a network appliance.
Am I affected by CVE-2023-52945?: Check whether you run Synology BeeDrive at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An uncontrolled search path element (CWE-427) vulnerability exists in the OpenSSL DLL component of Synology BeeDrive for desktop. The application fails to properly validate or restrict the search path used to load dynamic link libraries (DLLs), which can be exploited via DLL hijacking. A local attacker with low privileges can place a malicious DLL in a directory searched by the application to execute arbitrary code with the privileges of the BeeDrive process. This vulnerability is resolved in BeeDrive for desktop version 1.3.2-13814 and later. No user interaction is required for exploitation beyond the initial placement of the malicious file.

Affected products

Synology BeeDrive for desktop before 1.3.2-13814

Timeline

2024-11-26: advisory: Initial public release of Synology advisory
2024-11-26: patched: Fixed in version 1.3.2-13814
2026-05-27: disclosed: Detailed vulnerability information disclosed and CVE published

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_26

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.