Buffer Copy Vulnerability Affects Synology Login Service
CVE-2024-5463

6.5MEDIUM

Key Information:

Vendor

Synology
Status
Camera Firmware
Vendor
CVE Published:
4 June 2024

What is CVE-2024-5463?

A buffer copy vulnerability exists in the login component of Synology Camera Firmware, which does not properly validate the size of input data. This oversight can allow remote attackers to exploit the vulnerability by manipulating input, leading to denial-of-service attacks. The affected models, BC500 and TC500, may experience service interruptions due to an automatic restart of the login service. It is crucial for users to update their firmware to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Camera Firmware 1.1

Camera Firmware 1.1 < 1.1.1-0383

Camera Firmware 1.0 < 1.1.1-0383

References

https://www.synology.com/en-global/security/advisory/Syno...
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Andrea Maugeri (https://www.linkedin.com/in/andreamaugeri)
JSON
.