CVE-2024-29228

Summary

CVE-2024-29228 reflects a missing authorization issue in the GetStmUrlPath webapi component within Synology Surveillance Station versions prior to 9.2.0-9289 and 9.2.0-11289. This vulnerability allows remote, authenticated users to gain unauthorized access to sensitive information through unspecified vectors. The absence of proper authorization checks can lead to potential data breaches and unintended access to critical information. It is essential for Synology users to update their Surveillance Station software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.