PT-2026-43581 · Synology · Surveillance Station

Zhao Runzi · CVE-2024-47270 · Published 2026-05-27 · Updated 2026-05-28

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Synology Surveillance Station versions prior to 9.2.2-11575 Synology Surveillance Station versions prior to 9.2.2-9575

Description An improper preservation of permissions issue exists in the Archiving Push functionality. This allows remote authenticated users with administrator privileges to perform limited file write operations via unspecified vectors.

Recommendations Update to version 9.2.2-11575 or later. Update to version 9.2.2-9575 or later.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2024-47270

Affected Products

Surveillance Station

References · 3

• https://synology.com/en-global/security/advisory/Synology_SA_24_25 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47270 · Security Note
• https://t.me/cveNotify/165081 · Telegram Post