Medium · 4.3 CVE-2023-52944 EUVD-2023-59651GHSA-3j85-7c4g-4f56

Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 all…

Published Dec 4, 2024 · Updated Dec 4, 2024 · Assigned by synology

Vendor: Synology Product: Surveillance Station

Description

Incorrect authorization vulnerability in ActionRule webapi component in Synology Surveillance Station before 9.2.0-11289 and 9.2.0-9289 allows remote authenticated users to perform limited actions on the set action rules function via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Surveillance Station	< 9.2.0-11289, < 9.2.0-9289	9.2.0-11289

References

Synology-SA-24:04 Surveillance Station vendor-advisory