Improper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskStation Manager (DSM) before 7.2-64570-4, 7.2.1-69057-6 and 7.2.2-72806-1 allows remote attackers to execute arbitrary code via unspecified vectors.
References
| Link | Resource |
|---|---|
| https://www.synology.com/en-global/security/advisory/Synology_SA_24_20 | Vendor Advisory |
| https://www.synology.com/en-global/security/advisory/Synology_SA_24_23 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
17 Nov 2025, 13:43
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Synology diskstation Manager
Synology beestation Os Synology |
|
| References | () https://www.synology.com/en-global/security/advisory/Synology_SA_24_20 - Vendor Advisory | |
| References | () https://www.synology.com/en-global/security/advisory/Synology_SA_24_23 - Vendor Advisory | |
| CPE | cpe:2.3:o:synology:beestation_os:1.1:65373:*:*:*:*:*:* cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:-:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65162:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0.2:65233:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0.2:65235:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.1:-:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65145:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0.1:65210:*:*:*:*:*:* cpe:2.3:o:synology:beestation_os:1.0:65149:*:*:*:*:*:* |
Information
Published : 2025-03-19 02:15
Updated : 2025-11-17 13:43
NVD link : CVE-2024-10441
Mitre link : CVE-2024-10441
CVE.ORG link : CVE-2024-10441
JSON object : View
Products Affected
synology
- diskstation_manager
- beestation_os
CWE
CWE-116
Improper Encoding or Escaping of Output