CVE-2024-29227

Summary

CVE-2024-29227 is a vulnerability affecting Synology Surveillance Station before versions 9.2.0-9289 and 9.2.0-11289. This issue stems from an SQL injection flaw in the Layout.LayoutSave webapi component. Authenticated users can exploit this vulnerability by injecting SQL commands through unspecified vectors. The consequences of successful attacks could include unauthorized access to sensitive data or system modifications. It is critical for users to update their Surveillance Station software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.