CVE-2024-39350

Summary

CVE-2024-39350 is a newly identified vulnerability affecting Synology Camera firmware versions prior to 1.0.7-0298. This issue is linked to the RTSP functionality and allows man-in-the-middle attackers to bypass authentication. By exploiting this vulnerability, attackers can gain privileges without consent through unspecified vectors. The affected models include the BC500 and TC500. Organizations using these devices are urged to update their firmware as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.