# CVE-2024-47272: Synology Surveillance Station incorrect authorization in IO Module

Source: https://junglewise.ai/threats/cve-2024-47272-synology-surveillance-station-incorrect-authorization-in-io  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-05-27. Updated: 2026-05-27  
License: CC BY 4.0 with a link back

CVE-2024-47272 · Severity: low · CVSS 2.7 · Published 2026-05-27

Synology Surveillance Station, a video management system used for managing IP cameras and security recordings, contains a vulnerability in its IO Module. An authenticated user with administrator privileges can perform unauthorized file writes to certain locations on the system. While this requires high-level access, it could allow an administrator to exceed their intended permissions and modify system files, potentially impacting the integrity of the surveillance environment.

Technologies: [Synology Surveillance Station](https://junglewise.ai/threats/technologies/surveillance-station). Vendors: [Synology](https://junglewise.ai/threats/vendors/synology).

## Quick answers

**Is CVE-2024-47272 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2024-47272 being exploited in the wild.

**How severe is CVE-2024-47272?** Low severity, with a CVSS score of 2.7, published 27 May 2026.

**Which products and versions are affected?** Synology Surveillance Station before 9.2.2-11575.

**Is there a fix for CVE-2024-47272?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2024-47272 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2024-47272?** Check whether you run Synology Surveillance Station at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An incorrect authorization vulnerability (CWE-863) exists within the IO Module functionality of Synology Surveillance Station. The flaw allows a remote authenticated attacker with administrator-level privileges to perform limited file writes via unspecified vectors. The vulnerability is caused by insufficient permission checks when handling IO Module operations. This could lead to unauthorized modification of specific files on the underlying DiskStation Manager (DSM) host. The issue is resolved in Surveillance Station versions 9.2.2-11575 (for DSM 7.x) and 9.2.2-9575 (for DSM 6.2).

## Affected products

- Synology Surveillance Station for DSM 7.2 before 9.2.2-11575
- Synology Surveillance Station for DSM 7.1 before 9.2.2-11575
- Synology Surveillance Station for DSM 6.2 before 9.2.2-9575

## Timeline

- 2024-11-26: advisory: Initial public release of Synology advisory SA_24_25
- 2026-05-27: disclosed: Vulnerability details disclosed and CVE published

## References

- [https://www.synology.com/en-global/security/advisory/Synology_SA_24_25](https://www.synology.com/en-global/security/advisory/Synology_SA_24_25)

## Related threats

- [Synology Surveillance Station insufficiently protected credentials in IPSpeaker](https://junglewise.ai/threats/cve-2024-47271-synology-surveillance-station-insufficiently-protected)
- [Synology Surveillance Station improper preservation of permissions in Archiving Push](https://junglewise.ai/threats/cve-2024-47270-synology-surveillance-station-improper-preservation-of)
- [Synology Surveillance Station cleartext transmission in Export Key functionality](https://junglewise.ai/threats/cve-2024-47269-synology-surveillance-station-cleartext-transmission-in-export)
- [Synology Surveillance Station missing authorization in AddOns](https://junglewise.ai/threats/cve-2024-47268-synology-surveillance-station-missing-authorization-in-addons)
- [Synology Surveillance Station path traversal in Archiving Pull](https://junglewise.ai/threats/cve-2024-47267-synology-surveillance-station-path-traversal-in-archiving-pull)