Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-39352

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass fir

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass firmware integrity check via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Camera Firmware

Default version status: affected

  • 1.0 to < 1.0.7-0298affected

References