VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 4, 2025· Updated Dec 4, 2025

CVE-2024-5401

CVE-2024-5401

Description

Improper control of dynamically-managed code resources vulnerability in WebAPI component in Synology DiskStation Manager (DSM) before 7.1.1-42962-8 and 7.2.1-69057-2 and 7.2.2-72806 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote authenticated users to obtain privileges without consent via unspecified vectors.

Affected products

4
  • Synology/Diskstation Managerllm-fuzzy
    Range: <7.1.1-42962-8, <7.2.1-69057-2, <7.2.2-72806
  • Ui/Unifi Controllerllm-fuzzy
    Range: <3.1.4-23079
  • Synology/DiskStation Manager (DSM)v5
    Range: 7.2.2
  • Synology/Unified Controller (DSMUC)v5
    Range: 3.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.