Home

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.

PUBLISHED Reserved 2024-09-24 | Published 2026-05-27 | Updated 2026-05-27 | Assigner synology




LOW: 2.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Problem types

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

Default status
affected

* (semver) before 9.2.2-9575
affected

* (semver) before 9.2.2-11575
affected

Credits

Zhao Runzi (赵润梓) finder

References

www.synology.com/...obal/security/advisory/Synology_SA_24_25 (Synology-SA-24:25 Surveillance Station) vendor-advisory

cve.org (CVE-2024-47267)

nvd.nist.gov (CVE-2024-47267)

Download JSON