PT-2024-36392 · Synology · Synology Camera Firmware

·

CVE-2024-5463

·

Published

2024-06-04

·

Updated

2025-04-07

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Synology Camera Firmware versions prior to 1.1.1-0383
Description A buffer copy issue without input size checking, known as a 'Classic Buffer Overflow', has been found in the login component. This allows remote attackers to conduct denial-of-service attacks via unspecified vectors, affecting only the login service, which will automatically restart.
Recommendations For Synology Camera Firmware versions prior to 1.1.1-0383, update to version 1.1.1-0383 or later to resolve the issue. As a temporary workaround, consider restricting access to the login component to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2024-5463

Affected Products

Synology Camera Firmware