Is CVE-2024-47267 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2024-47267 being exploited in the wild.

How severe is CVE-2024-47267?

Low severity, with a CVSS score of 2.7, published 27 May 2026.

Which products and versions are affected?

Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575.

Is there a fix for CVE-2024-47267?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2024-47267 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2024-47267?

Check whether you run Synology Surveillance Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2024-47267: Synology Surveillance Station path traversal in Archiving Pull

CVE-2024-47267 · Severity: low · CVSS 2.7 · Published 2026-05-27

Synology Surveillance Station, a video management system for security cameras, contains a vulnerability in its Archiving Pull feature. An authorized administrator could potentially write files to unintended locations on the system. While this requires high-level access, it could allow for unauthorized modification of system files or configuration.

Technologies: Synology Surveillance Station. Vendors: Synology.

Quick answers

Is CVE-2024-47267 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2024-47267 being exploited in the wild.
How severe is CVE-2024-47267?: Low severity, with a CVSS score of 2.7, published 27 May 2026.
Which products and versions are affected?: Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575.
Is there a fix for CVE-2024-47267?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2024-47267 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2024-47267?: Check whether you run Synology Surveillance Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A path traversal vulnerability (CWE-22) exists in the Archiving Pull functionality of Synology Surveillance Station. The flaw stems from improper limitation of pathnames to restricted directories, allowing an attacker to bypass intended directory constraints. A remote authenticated user with administrator privileges can exploit this via unspecified vectors to achieve limited file writes on the underlying filesystem. The vulnerability is addressed in versions 9.2.2-11575 (for DSM 7.1/7.2) and 9.2.2-9575 (for DSM 6.2).

Affected products

Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575

Timeline

2024-11-26: advisory: Initial public release of Synology advisory SA_24_25
2026-05-27: disclosed: Detailed vulnerability information published

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_25

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.