A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
References
No reference.
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: synology
Published: 2024-06-28T06:07:21.260Z
Updated: 2024-06-28T14:13:43.888Z
Reserved: 2024-06-24T10:57:17.891Z
Link: CVE-2024-39351
JSON object: View
NVD Information
No data.
Redhat Information
No data.
CWE