CVE-2024-39351

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. This allows remote authenticated users with administrator privileges to execute arbitrary commands via unspecified vectors. The following models with Synology Camera Firmware versions before 1.0.7-0298 may be affected: BC500 and TC500.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
Synology	Camera Firmware	>= 1.0, < 1.0.7-0298
synology	camera_firmware	>= 1.0, < 1.0.7-0298

References

https://www.synology.com/en-global/security/advisory/Synology_SA_23_15Vendor Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_23_15Vendor Advisory

Timeline

Published: Jun 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-393524.9A vulnerability regarding incorrect authorization is found in the firmware upgrade functionality. This allows remote authenticated users wit CVE-2024-393532.7Mattermost versions 9.5.x <= 9.5.5 and 9.8.0 fail to sanitize the RemoteClusterFrame payloads before audit logging them which allows a high CVE-2024-393547.8If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer over CVE-2024-393556.5Improper handling of physical or environmental conditions in some Intel(R) Processors may allow an authenticated user to enable denial of se CVE-2024-393567.4NULL pointer dereference in some Intel(R) PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an una CVE-2024-393577.2A stack-based buffer overflow vulnerability exists in the wireless.cgi SetName() functionality of Wavlink AC3000 M33A8.V5030.210505. A speci CVE-2024-393587.2A buffer overflow vulnerability exists in the adm.cgi set_wzap() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTT CVE-2024-393597.2A stack-based buffer overflow vulnerability exists in the wireless.cgi DeleteMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A spe CVE-2024-39364.3The The Post Grid – Shortcode, Gutenberg Blocks and Elementor Addon for Post Grid plugin for WordPress is vulnerable to unauthorized modific CVE-2024-393607.2An os command injection vulnerability exists in the nas.cgi remove_dir() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially cra CVE-2024-393615.4Mattermost versions 9.8.0, 9.7.x <= 9.7.4, 9.6.x <= 9.6.2 and 9.5.x <= 9.5.5 fail to prevent users from specifying a RemoteId for their post CVE-2024-393636.1A cross-site scripting (xss) vulnerability exists in the login.cgi set_lang_CountryCode() functionality of Wavlink AC3000 M33A8.V5030.210505