CVE-2024-29241
CVSS 3.1 Score 9.9 of 10 (high)
Details
Summary
The vulnerability with the CVE ID CVE-2024-29241 affects the System webapi component in Synology Surveillance Station versions before 9.2.0-9289 and 9.2.0-11289. It is classified as a missing authorization vulnerability and allows remote authenticated users to bypass security constraints through unspecified vectors. The base severity of this vulnerability is rated as CRITICAL with a base score of 9.9 out of 10, indicating a high level of danger to organizations. The exploitability score is 3.1, and it requires low privileges and no user interaction. The attack vector is through the network, and it has a high integrity impact and low confidentiality impact. To remediate this vulnerability, organizations should update their Synology Surveillance Station to version 9.2.0-9289 or 9.2.0-11289 to ensure that the security constraints are properly enforced and unauthorized access is prevented.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions