CVE-2024-50630CWE-306

Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and…

High · published March 19, 2025

CVSS v3.1
7.5
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and 3.5.1-26102 allows remote attackers to obtain administrator credentials via unspecified vectors.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.24558 · 97.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-03-19T05:50Z
EPSS history
Timeline
  • 19 MAR 05:50Z
    Missing authentication for critical function vulnerability in the webapi component in Synology Drive Server before 3.0.4-12699, 3.2.1-23280, 3.5.0-26085 and…
    cvelistv5