Priority LOW 36
A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality.
Vulnerabilities
6 records
Advisory: Synology Camera Firmware — Synology-SA-23:15 Synology Camera (PWN2OWN 2023) Clear all filters
TI-2024-26305 CVE-2024-39352 · GHSA-h2m9-38g2-xrh9
Incorrect authorization in Synology Camera Firmware
Priority LOW 24
A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality.
TI-2024-26304 CVE-2024-39351 · GHSA-jpcf-pv77-3mfc
OS command injection in Synology Camera Firmware
Priority LOW 37
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration.
TI-2024-26302 CVE-2024-39349 · GHSA-fc4v-676g-hqh4
Buffer overflow in Synology Camera Firmware
Priority MEDIUM 52
A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library.
TI-2023-25911 CVE-2023-47803 · GHSA-jv4f-v7gg-5mvh
Path traversal in Synology Camera Firmware
Priority LOW 31
A vulnerability regarding improper limitation of a pathname to a restricted directory ('Path Traversal') is found in the Language Settings functionality.
TI-2023-25910 CVE-2023-47802 · GHSA-h7wv-22h8-mr42
OS command injection in Synology Camera Firmware
Priority LOW 37
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality.