CVE-2024-5463
MEDIUMSynology Bc500 Firmware < 1.1.1-0383 - Buffer Overflow
Title source: ruleDescription
A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allows remote attackers to write specific files containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. This attack only affects the login service which will automatically restart. The following models with Synology Camera Firmware versions before 1.1.1-0383 may be affected: BC500 and TC500.
References (1)
Core 1
Core References
Vendor Advisory vendor-advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_07
Scores
CVSS v3
6.5
EPSS
0.0243
EPSS Percentile
85.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-120
Status
published
Products (2)
synology/bc500_firmware
< 1.1.1-0383
synology/tc500_firmware
< 1.1.1-0383
Published
Jun 04, 2024
Tracked Since
Feb 18, 2026