Home

Description

Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

PUBLISHED Reserved 2024-09-24 | Published 2026-05-27 | Updated 2026-05-27 | Assigner synology




MEDIUM: 4.9CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Problem types

Missing Authorization

Product status

Default status
affected

* (semver) before 9.2.2-9575
affected

* (semver) before 9.2.2-11575
affected

Credits

Zhao Runzi (赵润梓) finder

李建申（https://lsr00ter.github.io） finder

References

www.synology.com/...obal/security/advisory/Synology_SA_24_25 (Synology-SA-24:25 Surveillance Station) vendor-advisory

cve.org (CVE-2024-47268)

nvd.nist.gov (CVE-2024-47268)

Download JSON