CVE-2024-29228

Summary

CVE-2024-29228 is a missing authorization vulnerability affecting Synology Surveillance Station's GetStmUrlPath webapi component. This issue, present in versions before 9.2.0-9289 and 9.2.0-11289, enables remote authenticated users to access sensitive information through unspecified vectors. By exploiting this vulnerability, attackers can potentially gain unauthorized access to critical data, posing a significant risk to system security. The precise nature of the attack vectors is not detailed in the disclosure, but it is recommended that users upgrade to the latest Surveillance Station versions to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.