Synology Surveillance Station vulnerabilities, page 2
25 vulnerabilities
Known vulnerabilities in Synology Surveillance Station, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-29240synologysurveillance_station
EPSS score0.68%
Missing authorization vulnerability in LayoutSave webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to conduct limited denial-of-service attacks via unspecified vectors.CVE-2024-29234synologysurveillance_stationEPSS score0.59%
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Group.Save webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.CVE-2024-29229synologysurveillance_stationEPSS score0.80%
Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.CVE-2023-52944synologysurveillance_stationEPSS score0.40%
Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to perform limited actions on the set action rules function via unspecified vectors.CVE-2023-52943synologysurveillance_stationEPSS score0.40%
Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to to perform limited actions on the alerting function via unspecified vectors.