CVE-2024-47266

Vulnerability

A path traversal vulnerability exists in the share file list functionality of Synology Active Backup for Business. The improper limitation of a pathname to a restricted directory allows remote authenticated users with administrator privileges to read specific files containing non-sensitive information via unspecified vectors. Affected versions are those before 2.7.1-13234 (for DSM 7.1), 2.7.1-23234 (for DSM 7.2), and 2.7.1-3234 (for DSM 6.2) [1].

Exploitation

An attacker must have remote network access and valid administrator credentials for the Synology Active Backup for Business instance. The exact attack vector is not disclosed, but it involves the share file list functionality. No user interaction beyond authentication is required, and the attack complexity is low [1].

Impact

Successful exploitation allows the attacker to read specific files that contain non-sensitive information. The confidentiality impact is low, and there is no impact on integrity or availability. The CVSS v3.1 base score is 2.7 (Low) [1].

Mitigation

Synology has released fixed versions: upgrade to 2.7.1-13234 (DSM 7.1), 2.7.1-23234 (DSM 7.2), or 2.7.1-3234 (DSM 6.2) or later. No workarounds are provided. The advisory was published on 2025-02-11 [1].