PT-2024-13925 · Synology · Video Station

·

CVE-2023-50360

·

Published

2024-09-06

·

Updated

2026-06-08

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Video Station versions prior to 5.8.1
Description A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network.
Recommendations For versions prior to 5.8.1, update to version 5.8.1 (2024/02/26) or later to patch this flaw. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-50360

Affected Products

Video Station