High severity7.7NVD Advisory· Published Mar 28, 2024· Updated Jun 17, 2026
CVE-2024-29229
CVE-2024-29229
Description
Missing authorization vulnerability in GetLiveViewPath webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to obtain sensitive information via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:synology:surveillance_station:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:synology:surveillance_station:*:*:*:*:*:*:*:*range: <9.2.0-9289
- (no CPE)range: <9.2.0-9289, <9.2.0-11289
- (no CPE)range: *
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/security/advisory/Synology_SA_24_04nvdVendor Advisory
News mentions
0No linked articles in our index yet.