CVE-2024-10442: Critical severity Synology Replication Service vulnerability
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the system via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10442?
CVE-2024-10442 has been classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-10442?
To fix CVE-2024-10442, update Synology Replication Service to version 1.0.12-0066 or later, or Synology Unified Controller to version 3.1.4-23079 or later.
What is the impact of CVE-2024-10442?
The impact of CVE-2024-10442 includes the potential for remote attackers to execute arbitrary code on affected systems.
Which Synology products are affected by CVE-2024-10442?
CVE-2024-10442 affects Synology Replication Service versions prior to 1.0.12-0066, 1.2.2-0353, and 1.3.0-0423, as well as Synology Unified Controller versions prior to 3.1.4-23079.
Who is vulnerable to CVE-2024-10442?
Organizations using vulnerable versions of Synology Replication Service and Unified Controller are at risk of CVE-2024-10442.