Critical severity10.0NVD Advisory· Published Mar 19, 2025· Updated Jun 17, 2026
CVE-2024-10442
CVE-2024-10442
Description
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the system via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- cpe:2.3:a:syncology:replication_service:*:*:*:*:*:*:*:*Range: <1.3.0-0423
cpe:2.3:a:synology:replication_service:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:synology:replication_service:*:*:*:*:*:*:*:*range: <=1.0.12-0066
- (no CPE)range: <1.0.12-0066, <1.2.2-0353, <1.3.0-0423
- (no CPE)range: *
<3.1.4-23079+ 1 more
- (no CPE)range: <3.1.4-23079
- (no CPE)range: 3.1
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/security/advisory/Synology_SA_24_22nvdVendor Advisory
News mentions
0No linked articles in our index yet.