Lucene search
Tri and Bien Pham (@bienpnn) from Team Orca of Sea SecurityZDI-24-832HistoryJun 21, 2024 - 12:00 a.m.
(Pwn2Own) Synology RT6600ax Improper Access Control Firewall Bypass Vulnerability
2024-06-2100:00:00
Tri and Bien Pham (@bienpnn) from Team Orca of Sea Security
www.zerodayinitiative.com
1
pwn2own
synology rt6600ax
improper access control
firewall bypass
lan interface
remote attackers
authentication
handling
initial setup
root context
7.4 High
AI Score
Confidence
Low
This vulnerability allows remote attackers to bypass firewall rules and access the LAN interface on affected installations of Synology RT6600ax routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of firewall rules. The issue results from improper access control after the initial setup. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root.
7.4 High
AI Score
Confidence
Low