CVE-2024-29237: SQL Injection
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in ActionRule.Delete webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to read database containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29237?
CVE-2024-29237 is considered a high severity vulnerability due to its potential for SQL injection attacks.
How do I fix CVE-2024-29237?
To fix CVE-2024-29237, update Synology Surveillance Station to version 9.2.0-11289 or above.
Who is affected by CVE-2024-29237?
Remote authenticated users of Synology Surveillance Station versions prior to 9.2.0-11289 are affected by CVE-2024-29237.
What systems are impacted by CVE-2024-29237?
CVE-2024-29237 impacts Synology Surveillance Station versions earlier than 9.2.0-11289.
How does CVE-2024-29237 work?
CVE-2024-29237 allows remote authenticated users to inject SQL commands through improper neutralization of special elements in SQL commands.