Skip to content
OpenAdvisories
Medium · 4.9 CVE-2024-47271 EUVD-2024-55597GHSA-29jv-pqcq-m927

Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-957…

Published May 27, 2026 · Updated May 27, 2026 · Assigned by synology

Description

Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Surveillance Station < 9.2.2-9575, < 9.2.2-11575 9.2.2-9575

References