CVE-2024-11131

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://www.synology.com/en-global/security/advisory/Synology_SA_24_24	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:synology:bc500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:synology:bc500:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:synology:cc400w_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:synology:cc400w:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:synology:tc500_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:synology:tc500:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-03-19 03:15

Updated : 2026-01-16 15:40

NVD link : CVE-2024-11131

Mitre link : CVE-2024-11131

CVE.ORG link : CVE-2024-11131

JSON object : View

Products Affected

synology

tc500
bc500_firmware
cc400w_firmware
bc500
tc500_firmware
cc400w

CWE

CWE-125

Out-of-bounds Read

{"id": "CVE-2024-11131", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security@synology.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2025-03-19T03:15:12.850", "references": [{"url": "https://www.synology.com/en-global/security/advisory/Synology_SA_24_24", "tags": ["Vendor Advisory"], "source": "security@synology.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security@synology.com", "description": [{"lang": "en", "value": "CWE-125"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500."}, {"lang": "es", "value": "Se ha detectado una vulnerabilidad relacionada con la lectura fuera de los l\u00edmites en la interfaz de v\u00eddeo. Esto permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante vectores no especificados. Los siguientes modelos con versiones de Synology Camera Firmware anteriores a la 1.2.0-0525 podr\u00edan verse afectados: BC500, CC400W y TC500."}], "lastModified": "2026-01-16T15:40:16.353", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:synology:bc500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CEA5E69C-54EF-455E-ABBC-BC5C47B508AA", "versionEndExcluding": "1.2.0-0525"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:synology:bc500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5FD618BD-29BD-4F43-9BEF-F73065247580"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:synology:cc400w_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "503DB5FE-CFE6-46D6-BB0B-F701718D08D6", "versionEndExcluding": "1.2.0-0525"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:synology:cc400w:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "C80838B6-25A0-4C7F-8D0B-356E0BDF7BA3"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:synology:tc500_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "37BED664-E51F-4729-9890-8F3ED6A77EAF", "versionEndExcluding": "1.2.0-0525"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:synology:tc500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "582C2C89-3351-4DC6-B40A-7E2E4CA6AFEA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "security@synology.com"}