Synology Surveillance Station vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Synology Surveillance Station: 6 record(s), with affected versions and fixes.cpe:2.3:a:synology:surveillance_station
CVE-2024-47272
Low · 2.7
CWE-863 May 27, 2026
Incorrect Authorization in Synology Surveillance Station
Incorrect authorization vulnerability in IO Module functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.
CVE-2024-47271
Medium · 4.9
CWE-522 May 27, 2026
Insufficiently Protected Credentials in Synology Surveillance Station
Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.
CVE-2024-47270
Low · 2.7
CWE-281 May 27, 2026
Improper preservation of permissions vulnerability in Archiving Push functionality in…
Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.
CVE-2024-47269
Medium · 4.9
CWE-319 May 27, 2026
Cleartext Transmission of Sensitive Information in Synology Surveillance Station
Cleartext transmission of sensitive information vulnerability in Export Key functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.
CVE-2024-47268
Medium · 4.9
CWE-862 May 27, 2026
Missing Authorization in Synology Surveillance Station
Missing authorization vulnerability in AddOns functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.
CVE-2024-47267
Low · 2.7
CWE-22 May 27, 2026
Path Traversal in Synology Surveillance Station
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in Archiving Pull functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.