Camera Firmware
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:camera_firmware:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Camera Firmware (ad7b2c9f-4ebc-5a59-b5a3-b88cb1e9e4c5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5463 |
vulnerable | 2026-06-08 06:56:16.094973 |
Details available
MEDIUM (6.5)
A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allows remote attackers to write specific files containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. This attack only affects the login service which will automatically restart. The following models with Synology Camera Firmware versions before 1.1.1-0383 may be affected: BC500 and TC500.
Published: 2024-06-04T09:34:06.934Z
Updated: 2025-08-01T03:40:52.248Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39352 |
vulnerable | 2026-06-08 06:41:49.144912 |
Details available
MEDIUM (4.9)
A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users with administrator privileges to bypass firmware integrity check via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
Published: 2024-06-28T06:07:52.739Z
Updated: 2024-08-02T04:26:14.272Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39351 |
vulnerable | 2026-06-08 06:41:49.144494 |
Details available
HIGH (7.2)
A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
Published: 2024-06-28T06:07:21.260Z
Updated: 2024-08-02T04:26:14.288Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39350 |
vulnerable | 2026-06-08 06:41:49.144030 |
Details available
HIGH (7.5)
A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. This allows man-in-the-middle attackers to obtain privileges without consent via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
Published: 2024-06-28T06:55:25.157Z
Updated: 2024-08-02T04:26:14.798Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39349 |
vulnerable | 2026-06-08 06:41:49.140825 |
Details available
CRITICAL (9.8)
A vulnerability regarding buffer copy without checking size of input ('Classic Buffer Overflow') is found in the libjansson component and it does not affect the upstream library. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.
Published: 2024-06-28T06:03:59.624Z
Updated: 2024-08-02T04:26:15.428Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11131 |
vulnerable | 2026-06-08 06:23:48.834712 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5746 |
vulnerable | 2026-06-08 06:19:44.607519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47803 |
vulnerable | 2026-06-08 06:14:25.699820 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-47802 |
vulnerable | 2026-06-08 06:14:25.695293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.