CVE-2024-47270
Analyzed Analyzed - Analysis Complete
Improper Permission Preservation in Synology Surveillance Station

Publication date: 2026-05-27

Last updated on: 2026-05-28

Assigner: Synology Inc.

Description
Improper preservation of permissions vulnerability in Archiving Push functionality in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to limited file write via unspecified vectors.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-27
Last Modified
2026-05-28
Generated
2026-06-16
AI Q&A
2026-05-27
EPSS Evaluated
2026-06-15
NVD
CVE-2024-47270
EUVD
EUVD-2024-55596
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
synology surveillance_station to 9.2.2-11575 (exc)
synology surveillance_station to 9.2.2-9575 (exc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-281 The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided information does not specify how this vulnerability impacts compliance with common standards and regulations such as GDPR or HIPAA.

Impact Analysis

The impact of this vulnerability is that an attacker with administrator access could write files in a limited manner remotely. This could potentially lead to unauthorized modification of files within the system, which might affect system integrity or operation.

Executive Summary

This vulnerability is an improper preservation of permissions issue in the Archiving Push functionality of Synology Surveillance Station versions before 9.2.2-11575 and 9.2.2-9575. It allows remote authenticated users who have administrator privileges to perform limited file write operations through unspecified methods.

Mitigation Strategies

The recommended immediate step to mitigate this vulnerability is to upgrade Synology Surveillance Station to version 9.2.2-11575 or later for DSM 7.2 and 7.1, or version 9.2.2-9575 or later for DSM 6.2.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-47270. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart