CVE-2024-29239

Summary

CVE-2024-29239 is an SQL injection vulnerability affecting Synology Surveillance Station's Recording.CountByCategory webapi component. This issue, occurring in versions before 9.2.0-11289 and 9.2.0-9289, enables remote authenticated users to inject malicious SQL commands through unspecified vectors. The vulnerability potentially exposes sensitive data and grants unauthorized access, posing a significant risk to system security. It is essential for users to update their Surveillance Station software to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.