← CVE Intelligence

CVE-2024-39351

Synology / Camera Firmware PUBLISHED

Description (CNA)

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

Affected (CNA)

Vendor / productVersions
Synology / Camera Firmwareaffected 1.0 before 1.0.7-0298

CWE

CWE-78

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.