9.8

CVE-2024-11131

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synology ≫ Bc500 Firmware Version < 1.2.0-0525
   Synology ≫ Bc500 Version-
Synology ≫ Cc400w Firmware Version < 1.2.0-0525
   Synology ≫ Cc400w Version-
Synology ≫ Tc500 Firmware Version < 1.2.0-0525
   Synology ≫ Tc500 Version-
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.33% 0.928
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@synology.com 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-125 Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.