High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-28	CVE-2024-39350	Unspecified vulnerability in Synology Bc500 Firmware and Tc500 Firmware A vulnerability regarding authentication bypass by spoofing is found in the RTSP functionality. high complexity synology	7.5
2024-06-28	CVE-2023-47802	OS Command Injection vulnerability in Synology Bc500 Firmware and Tc500 Firmware A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the IP block functionality. network low complexity synology CWE-78	7.2
2024-06-28	CVE-2024-39351	OS Command Injection vulnerability in Synology Bc500 Firmware and Tc500 Firmware A vulnerability regarding improper neutralization of special elements used in an OS command ('OS Command Injection') is found in the NTP configuration. network low complexity synology CWE-78	7.2
2024-06-04	CVE-2024-5463	Classic Buffer Overflow vulnerability in Synology Bc500 Firmware and Tc500 Firmware A vulnerability regarding buffer copy without checking the size of input ('Classic Buffer Overflow') has been found in the login component. network low complexity synology CWE-120	7.5