# CVE-2024-47267: Synology Surveillance Station path traversal in Archiving Pull

Source: https://junglewise.ai/threats/cve-2024-47267-synology-surveillance-station-path-traversal-in-archiving-pull  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-27. Updated: 2026-05-27  
License: CC BY 4.0 with a link back

CVE-2024-47267 · Severity: low · CVSS 2.7 · Published 2026-05-27

Synology Surveillance Station, a video management system for security cameras, contains a vulnerability in its Archiving Pull feature. An authorized administrator could potentially write files to unintended locations on the system. While this requires high-level access, it could allow for unauthorized modification of system files or configuration.

Technologies: [Synology Surveillance Station](https://junglewise.ai/threats/technologies/surveillance-station). Vendors: [Synology](https://junglewise.ai/threats/vendors/synology).

## Quick answers

**Is CVE-2024-47267 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-47267 being exploited in the wild.

**How severe is CVE-2024-47267?** Low severity, with a CVSS score of 2.7, published 27 May 2026.

**Which products and versions are affected?** Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575.

**Is there a fix for CVE-2024-47267?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-47267 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2024-47267?** Check whether you run Synology Surveillance Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A path traversal vulnerability (CWE-22) exists in the Archiving Pull functionality of Synology Surveillance Station. The flaw stems from improper limitation of pathnames to restricted directories, allowing an attacker to bypass intended directory constraints. A remote authenticated user with administrator privileges can exploit this via unspecified vectors to achieve limited file writes on the underlying filesystem. The vulnerability is addressed in versions 9.2.2-11575 (for DSM 7.1/7.2) and 9.2.2-9575 (for DSM 6.2).

## Affected products

- Synology Surveillance Station before 9.2.2-11575 and 9.2.2-9575

## Timeline

- 2024-11-26: advisory: Initial public release of Synology advisory SA_24_25
- 2026-05-27: disclosed: Detailed vulnerability information published

## References

- [https://www.synology.com/en-global/security/advisory/Synology_SA_24_25](https://www.synology.com/en-global/security/advisory/Synology_SA_24_25)

## Related threats

- [Synology Surveillance Station incorrect authorization in IO Module](https://junglewise.ai/threats/cve-2024-47272-synology-surveillance-station-incorrect-authorization-in-io)
- [Synology Surveillance Station insufficiently protected credentials in IPSpeaker](https://junglewise.ai/threats/cve-2024-47271-synology-surveillance-station-insufficiently-protected)
- [Synology Surveillance Station improper preservation of permissions in Archiving Push](https://junglewise.ai/threats/cve-2024-47270-synology-surveillance-station-improper-preservation-of)
- [Synology Surveillance Station cleartext transmission in Export Key functionality](https://junglewise.ai/threats/cve-2024-47269-synology-surveillance-station-cleartext-transmission-in-export)
- [Synology Surveillance Station missing authorization in AddOns](https://junglewise.ai/threats/cve-2024-47268-synology-surveillance-station-missing-authorization-in-addons)