Unrated severityNVD Advisory· Published Jun 28, 2024· Updated Aug 2, 2024
CVE-2024-39351
CVE-2024-39351
Description
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.0.7-0298
- Synology/Camera Firmwarev5Range: 1.0
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/security/advisory/Synology_SA_23_15mitrevendor-advisory
News mentions
0No linked articles in our index yet.