CVE-2024-10441

CRITICAL

Synology BeeStation OS <1.1-65374 & DSM <7.2-64570-4, 7.2.1-69057-6...

Title source: llm
STIX 2.1

Description

Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors.

References (2)

Scores

CVSS v3 9.8
EPSS 0.0189
EPSS Percentile 83.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-116
Status published
Products (5)
synology/beestation_os 1.0 (4 CPE variants)
synology/beestation_os 1.0.1 65210
synology/beestation_os 1.0.2 65233 (2 CPE variants)
synology/beestation_os 1.1 (2 CPE variants)
synology/diskstation_manager 7.2 - 7.2-64570-4
Published Mar 19, 2025
Tracked Since Feb 18, 2026