CVE-2024-50629

MEDIUM

Synology BeeStation OS <1.1-65374 & DSM <7.1.1-42962-7,7.2-64570-4,...

Title source: llm

Description

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.

Exploits (1)

nomisec WORKING POC 32 stars
by kiddo-pwn · poc
https://github.com/kiddo-pwn/CVE-2024-50629_50631

References (2)

Scores

CVSS v3 5.3
EPSS 0.0013
EPSS Percentile 32.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-116
Status published

Affected Products (10)

synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/beestation_os
synology/diskstation_manager < 7.1.1-42962-7

Timeline

Published Mar 19, 2025
Tracked Since Feb 18, 2026