CVE-2024-50629

MEDIUM

Synology BeeStation OS <1.1-65374 & DSM <7.1.1-42962-7,7.2-64570-4,...

Title source: llm

Description

Improper encoding or escaping of output vulnerability in the webapi component in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allow remote attackers to read limited files via unspecified vectors.

Exploits (1)

nomisec WORKING POC 32 stars
by kiddo-pwn · poc
https://github.com/kiddo-pwn/CVE-2024-50629_50631

References (2)

Scores

CVSS v3 5.3
EPSS 0.0260
EPSS Percentile 85.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-116
Status published
Products (5)
synology/beestation_os 1.0 (4 CPE variants)
synology/beestation_os 1.0.1 65210
synology/beestation_os 1.0.2 65233 (2 CPE variants)
synology/beestation_os 1.1 (2 CPE variants)
synology/diskstation_manager 7.1 - 7.1.1-42962-7
Published Mar 19, 2025
Tracked Since Feb 18, 2026