CVE-2024-47271

Analyzed Analyzed - Analysis Complete

Insufficient Credential Protection in Synology Surveillance Station

Publication date: 2026-05-27

Last updated on: 2026-05-28

Assigner: Synology Inc.

Description

Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-27

Last Modified

2026-05-28

Generated

2026-07-06

AI Q&A

2026-05-27

EPSS Evaluated

2026-07-05

NVD

CVE-2024-47271

EUVD

EUVD-2024-55597

Affected Vendors & Products

Vendor	Product	Version / Range
synology	surveillance_station	to 9.2.2-11575 (exc)
synology	surveillance_station	to 9.2.2-9575 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-522	The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Attack-Flow Graph

Executive Summary

This vulnerability is an insufficiently protected credentials issue in the IPSpeaker component of Synology Surveillance Station versions before 9.2.2-11575 and 9.2.2-9575. It allows remote authenticated users who have administrator privileges to obtain sensitive information through unspecified methods.

Impact Analysis

The impact of this vulnerability is that an attacker with administrator access can remotely obtain sensitive information from the system. This could lead to exposure of confidential data, potentially compromising system security and privacy.

Compliance Impact

CVE-2024-47271 involves an insufficiently protected credentials vulnerability in the IPSpeaker component of Synology Surveillance Station, allowing remote authenticated users with administrator privileges to obtain sensitive information.

Since the vulnerability allows unauthorized access to sensitive information, it could potentially impact compliance with data protection regulations such as GDPR and HIPAA, which require adequate protection of sensitive data.

However, the provided information does not explicitly discuss the impact on compliance with these or other common standards and regulations.

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Synology Surveillance Station to version 9.2.2-11575 or later for DSM 7.2 and 7.1, or to version 9.2.2-9575 or later for DSM 6.2.

Hi! I’m here to help you understand CVE-2024-47271. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70