CVE-2024-39349

The vulnerability consists of copying data to a buffer without verifying the input data size (Classic Buffer Overflow, CWE-120) in a local modification of the libjansson component — the manufacturer notes that the vulnerability does not exist in the upstream library. A remote attacker, without authentication and without user interaction, can send crafted data over the network, causing buffer overflow. As a result, it is possible to hijack control over the process execution flow and execute arbitrary code.

An attacker can remotely execute arbitrary code on the vulnerable device (RCE), which in practice means the possibility of complete camera takeover, violation of image confidentiality, system integrity compromise, and device availability disruption.

Synology BC500 and TC500 camera firmware should be updated to version 1.0.7-0298 or later, in accordance with the manufacturer's recommendations published in the Synology_SA_23_15 bulletin available on the Synology website.

Synology BC500 and TC500 cameras with Synology Camera firmware versions earlier than 1.0.7-0298.