Vulnerability Details CVE-2024-39350
A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.2%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2024-39350
-
cpe:2.3:h:synology:bc500:-
-
cpe:2.3:h:synology:tc500:-
-
cpe:2.3:o:synology:bc500_firmware:-
-
cpe:2.3:o:synology:bc500_firmware:1.0.4-0182
-
cpe:2.3:o:synology:bc500_firmware:1.0.5-0185
-
cpe:2.3:o:synology:bc500_firmware:1.0.6-0290
-
cpe:2.3:o:synology:bc500_firmware:1.0.6-0294
-
cpe:2.3:o:synology:tc500_firmware:-
-
cpe:2.3:o:synology:tc500_firmware:1.0.2-0142
-
cpe:2.3:o:synology:tc500_firmware:1.0.4-0182
-
cpe:2.3:o:synology:tc500_firmware:1.0.5-0185
-
cpe:2.3:o:synology:tc500_firmware:1.0.6-0290
-
cpe:2.3:o:synology:tc500_firmware:1.0.6-0294