A vulnerability regarding use of externally-controlled format string is found in the cgi component. This allows remote malicious users to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions prior to 1.0.5-0185 may be affected: BC500 and TC500.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
synology bc500_firmware |
||
synology tc500_firmware |
Vulmon