CVE-2024-10442

🗓️ 19 Mar 2025 02:14:03Reported by synologyType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 192 Views

Off-by-one error in Synology Replication Service allows remote code execution vulnerability.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	Synology Replication Service RCE	9 Apr 202500:00	–	bdu_fstec
Circl	CVE-2024-10442	19 Mar 202502:49	–	circl
CNNVD	Synology Replication Service security vulnerability	19 Mar 202500:00	–	cnnvd
Cvelist	CVE-2024-10442	19 Mar 202502:14	–	cvelist
EUVD	EUVD-2024-54108	3 Oct 202520:07	–	euvd
NCSC	Vulnerability fixed in Synology Replication Service and Synology Unified Controller	19 Mar 202515:02	–	ncsc
NVD	CVE-2024-10442	19 Mar 202503:15	–	nvd
osv_cve	CVE-2024-10442	19 Mar 202503:15	–	osv_cve
Positive Technologies	PT-2025-11655 · Synology · Synology Application Service +1	5 Nov 202400:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2024-10442: Off-by-one Error	19 Mar 202500:00	–	rapid7

NVD

Vulners

Node

AND

synology unified_controllerRange<3.1.4-23079

synology diskstation_manager_unified_controllerMatch3.1

Node

AND

synology replication_serviceRange≤1.0.12-0066

synology diskstation_managerMatch6.2

Node

AND

synology replication_serviceRange<1.2.2-0353

synology diskstation_managerMatch7.1

Node

AND

syncology replication_serviceRange<1.3.0-0423

synology diskstation_managerMatch7.2

[
  {
    "vendor": "Synology",
    "product": "Unified Controller (DSMUC)",
    "versions": [
      {
        "version": "3.1",
        "status": "affected",
        "lessThan": "3.1.4-23079",
        "versionType": "semver"
      },
      {
        "version": "0",
        "status": "unknown",
        "lessThan": "3.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Synology",
    "product": "Replication Service",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThan": "1.2.2-0353",
        "versionType": "semver"
      },
      {
        "version": "*",
        "status": "affected",
        "lessThan": "1.0.12-0066",
        "versionType": "semver"
      },
      {
        "version": "*",
        "status": "affected",
        "lessThan": "1.3.0-0423",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "affected"
  }
]