CVE-2024-29235: SQL Injection
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in IOModule.EnumLog webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29235?
CVE-2024-29235 is considered a high severity SQL Injection vulnerability.
How do I fix CVE-2024-29235?
To fix CVE-2024-29235, update Synology Surveillance Station to version 9.2.0-11289 or later.
Who is affected by CVE-2024-29235?
CVE-2024-29235 affects remote authenticated users of Synology Surveillance Station versions prior to 9.2.0-11289.
What components are involved in CVE-2024-29235?
CVE-2024-29235 involves the IOModule.EnumLog webapi component in Synology Surveillance Station.
Can CVE-2024-29235 lead to data compromise?
Yes, CVE-2024-29235 can allow attackers to inject SQL commands, potentially compromising the database.