CVE-2024-39349

CRITICAL

Synology Bc500 Firmware < 1.0.7-0298 - Buffer Overflow

Title source: rule
STIX 2.1

Description

A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

References (1)

Core 1
Core References

Scores

CVSS v3 9.8
EPSS 0.0439
EPSS Percentile 89.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-120
Status published
Products (2)
synology/bc500_firmware < 1.0.7-0298
synology/tc500_firmware < 1.0.7-0298
Published Jun 28, 2024
Tracked Since Feb 18, 2026