CVE-2024-29228: High severity synology surveillance station vulnerability
Missing authorization vulnerability in GetStmUrlPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29228?
CVE-2024-29228 is considered a medium severity vulnerability as it allows remote authenticated users to access sensitive information.
How do I fix CVE-2024-29228?
To mitigate CVE-2024-29228, upgrade Synology Surveillance Station to version 9.2.0-9289 or 9.2.0-11289 or later.
What type of vulnerability is CVE-2024-29228?
CVE-2024-29228 is a missing authorization vulnerability that affects the GetStmUrlPath webapi component.
Who is affected by CVE-2024-29228?
Users of Synology Surveillance Station versions prior to 9.2.0-9289 and 9.2.0-11289 are vulnerable to CVE-2024-29228.
What can attackers do with CVE-2024-29228?
Attackers can exploit CVE-2024-29228 to obtain sensitive information by using unspecified vectors.