CVE-2024-10445

Summary

CVE-2024-10445 is a newly disclosed vulnerability affecting Synology's BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1. This issue arises due to improper certificate validation in the update functionality. An attacker can exploit this vulnerability remotely and write limited files, potentially leading to unintended system modifications. The specific vectors of attack are currently unknown. Users are advised to update their systems as soon as patches become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.