CVE-2024-47271 - Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors

Back Back to CVE browser

MEDIUM

Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors

Published May 27, 2026

4.9

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

Insufficiently protected credentials vulnerability in IPSpeaker component in Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575 allows remote authenticated users with administrator privileges to obtain sensitive information via unspecified vectors.

Affected products

Vendor Synology Product Surveillance Station Default
affected
- Version
  -
  Status
  affected
  Constraints
  <9.2.2-11575
- Version
  -
  Status
  affected
  Constraints
  <9.2.2-9575

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Synology

Surveillance Station

affected

Version	Status	Constraints
-	affected	<9.2.2-11575
-	affected	<9.2.2-9575

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55597
Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_25
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-55597		Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_24_25		vendor-advisoryVendor Advisory