Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-10445 EUVD-2024-54097GHSA-fwhw-h3p7-gx3q

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology Dis…

Published Mar 19, 2025 · Updated Mar 28, 2025 · Assigned by synology

Vendor: Synology Product: BeeStation OS (BSM) Product: DiskStation Manager (DSM)

Description

Improper certificate validation vulnerability in the update functionality in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to write limited files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) 7.2.2 – < 7.2.2-72806-1, 7.2.1 – < 7.2.1-69057-6, 7.2 – < 7.2-64570-4, 7.1 – < 7.1.1-42962-7, 6.2 – < 6.2.4-25556-8 7.2.2-72806-1
Synology BeeStation OS (BSM) 1.1 – < 1.1-65374, 1.0 – < 1.1-65374 1.1-65374

Advisories 1

References