CVE-2024-29240

Summary

CVE-2024-29240 is a missing authorization vulnerability affecting Synology Surveillance Station's LayoutSave webapi component. This issue, present in versions before 9.2.0-11289 and 9.2.0-9289, allows remote, authenticated users to execute denial-of-service attacks. Specific vectors of attack are unspecified, but the vulnerability poses a significant risk to system availability. It is strongly recommended that users update their Surveillance Station software to the latest version to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.