# Synology Surveillance Station.

Every CVE that names Synology Surveillance Station among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Incorrect authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47272.md)
  `CVE-2024-47272` · CVE record: Synology Surveillance Station · CVSS 2.7 Low · Not analysed yet · Published 27 May 2026 · Tags: Broken access control
- [Insufficiently protected credentials in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47271.md)
  `CVE-2024-47271` · CVE record: Synology Surveillance Station · CVSS 4.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Hard-coded credentials
- [Synology Surveillance Station: Improper preservation of permissions vulnerability in Archiving Push functionality in…](https://agentprime.io/advisories/CVE-2024-47270.md)
  `CVE-2024-47270` · CVE record: Synology Surveillance Station · CVSS 2.7 Low · Not analysed yet · Published 27 May 2026 · Tags: CWE-281
- [Cleartext transmission of sensitive information in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47269.md)
  `CVE-2024-47269` · CVE record: Synology Surveillance Station · CVSS 4.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Weak cryptography or TLS
- [Missing authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47268.md)
  `CVE-2024-47268` · CVE record: Synology Surveillance Station · CVSS 4.9 Medium · Not analysed yet · Published 27 May 2026 · Tags: Broken access control
- [Path traversal in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-47267.md)
  `CVE-2024-47267` · CVE record: Synology Surveillance Station · CVSS 2.7 Low · Not analysed yet · Published 27 May 2026 · Tags: Path traversal
- [Incorrect authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2023-52944.md)
  `CVE-2023-52944` · CVE record: Synology Surveillance Station · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Broken access control
- [Incorrect authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2023-52943.md)
  `CVE-2023-52943` · CVE record: Synology Surveillance Station · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2024 · Tags: Broken access control
- [Missing authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29241.md)
  `CVE-2024-29241` · CVE record: Synology Surveillance Station · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Mar 2024 · Tags: Broken access control
- [Missing authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29240.md)
  `CVE-2024-29240` · CVE record: Synology Surveillance Station · CVSS 4.3 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: Broken access control
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29239.md)
  `CVE-2024-29239` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29238.md)
  `CVE-2024-29238` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29237.md)
  `CVE-2024-29237` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29236.md)
  `CVE-2024-29236` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29235.md)
  `CVE-2024-29235` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29234.md)
  `CVE-2024-29234` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29233.md)
  `CVE-2024-29233` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29232.md)
  `CVE-2024-29232` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [Improper array index validation in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29231.md)
  `CVE-2024-29231` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: CWE-129
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29230.md)
  `CVE-2024-29230` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [Missing authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29229.md)
  `CVE-2024-29229` · CVE record: Synology Surveillance Station · CVSS 7.7 High · Not analysed yet · Published 28 Mar 2024 · Tags: Broken access control
- [Missing authorization in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29228.md)
  `CVE-2024-29228` · CVE record: Synology Surveillance Station · CVSS 7.7 High · Not analysed yet · Published 28 Mar 2024 · Tags: Broken access control
- [SQL injection in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2024-29227.md)
  `CVE-2024-29227` · CVE record: Synology Surveillance Station · CVSS 5.4 Medium · Not analysed yet · Published 28 Mar 2024 · Tags: SQL injection
- [Synology Surveillance Station: File and directory information exposure vulnerability in…](https://agentprime.io/advisories/CVE-2017-16770.md)
  `CVE-2017-16770` · CVE record: Synology Surveillance Station · No CVSS score · Not analysed yet · Published 27 Feb 2018 · Tags: Information disclosure
- [Cross-site scripting in Synology Surveillance Station](https://agentprime.io/advisories/CVE-2017-16767.md)
  `CVE-2017-16767` · CVE record: Synology Surveillance Station · No CVSS score · Not analysed yet · Published 27 Feb 2018 · Tags: Cross-site scripting (XSS)

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=synology-surveillance-station>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/synology-surveillance-station/>. Everything for agents: <https://agentprime.io/llms.txt>.