CVE-2024-10443 in BeePhotos

Riassunto

di MITRE • 15/11/2024

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Synology
• Prenotare: 28/10/2024
• Divulgazione: 15/11/2024
• Moderazione: accettato
• Voce: VDB-284689
• CPE: pronto
• CWE: CWE-77 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.28380
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-10443
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-10443
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-10443/