CVE-2024-5463

A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. This allows remote attackers to write specific files containing non-sensitive information and conduct limited denial-of-service attacks via unspecified vectors. This attack only affects the login service which will automatically restart. The following models with Synology Camera Firmware versions before 1.1.1-0383 may be affected: BC500 and TC500.

• CWE-120
• CWE-120

• https://www.synology.com/en-global/security/advisory/Synology_SA_24_07Vendor Advisory
• https://www.synology.com/en-global/security/advisory/Synology_SA_24_07Vendor Advisory

Published

Jun 4, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5457The Panda Video plugin for WordPress is vulnerable to Stored…5.4
• CVE-2024-5458In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.…5.3
• CVE-2024-5459The Restaurant Menu and Food Ordering plugin for WordPress i…4.3
• CVE-2024-5460A vulnerability in the default configuration of the Simple N…8.1
• CVE-2024-5461Implementation of the Simple Network Management Protocol (S…8
• CVE-2024-5462If Brocade Fabric OS before Fabric OS 9.2.0 configuration se…7.5
• CVE-2024-5464Vulnerability of insufficient permission verification in the…3.3
• CVE-2024-5465Function vulnerabilities in the Calendar module Impact: Succ…5.5
• CVE-2024-54658The issue was addressed with improved memory handling. This …6.5
• CVE-2024-5466Zohocorp ManageEngine OpManager and Remote Monitoring and Ma…8.8
• CVE-2024-54660A JNDI injection issue was discovered in Cloudera JDBC Conne…8.7
• CVE-2024-54661readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/…9.8