PT-2026-43583 · Synology · Surveillance Station

Zhao Runzi · Publicado 2026-05-27 · Atualizado 2026-05-27 · CVE-2024-47272

NVD

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2024-47272

Produtos afetados

Surveillance Station

Referências · 2

• https://synology.com/en-global/security/advisory/Synology_SA_24_25 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2024-47272 · Nota de Segurança