Vulnerability Details CVE-2024-10442
Off-by-one error vulnerability in the transmission component in Synology Replication Service before 1.0.12-0066, 1.2.2-0353 and 1.3.0-0423 and Synology Unified Controller (DSMUC) before 3.1.4-23079 allows remote attackers to execute arbitrary code, potentially leading to a broader impact across the system via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 75.1%
CVSS Severity
CVSS v3 Score 10.0
Products affected by CVE-2024-10442
-
cpe:2.3:a:syncology:replication_service:*
-
cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1
-
cpe:2.3:a:synology:replication_service:*
-
cpe:2.3:a:synology:unified_controller:*
-
cpe:2.3:o:synology:diskstation_manager:6.2
-
cpe:2.3:o:synology:diskstation_manager:7.1
-
cpe:2.3:o:synology:diskstation_manager:7.2