Medium · 4.3 CVE-2023-52943 EUVD-2023-59650GHSA-rxhm-9gmq-9482

Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 …

Published Dec 4, 2024 · Updated Dec 4, 2024 · Assigned by synology

Vendor: Synology Product: Surveillance Station

Description

Incorrect authorization vulnerability in Alert.Setting webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to to perform limited actions on the alerting function via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Surveillance Station	< 9.2.0-11289, < 9.2.0-9289	9.2.0-11289

References

Synology-SA-24:04 Surveillance Station vendor-advisory