Skip to content
NewA calmer, faster ZeroHour

Synology fixed critical flaw impacting millions of DiskStation and BeePhotos NAS devices

Security Affairsby @securityaffairs ()2 min read4 · 3 reads
Analyze CVE-2024-10443 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2024-10443
Unauthenticated OS Command Injection RCE in Synology Photos and BeePhotos
9.828%

From the original article

2 min read at securityaffairs.com

Synology addressed a critical vulnerability in DiskStation and BeePhotos NAS devices that could lead to remote code execution. Taiwanese vendor Synology has addressed a critical security vulnerability, tracked as CVE-2024-10443, that impacts DiskStation and BeePhotos. An attacker can exploit the flaw without any user interaction and successful exploitation of this flaw could lead to remote code execution.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.