CVE-2024-50630

Summary

CVE-2024-50630 is a critical vulnerability affecting Synology Drive Server versions before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085, and 3.5.1-26102. This issue involves a missing authentication mechanism for a crucial function in the webapi component. An attacker can exploit this weakness through unspecified vectors to gain administrator credentials, posing a significant risk to affected systems. Successful exploitation could allow unauthorized access, modification, and potential data theft. Users are advised to update their Synology Drive Server software to the latest versions to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.