CVE-2024-11131: Synology BC500 Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A vulnerability regarding out-of-bounds read is found in the video interface. This allows remote attackers to execute arbitrary code via unspecified vectors. The following models with Synology Camera Firmware versions before 1.2.0-0525 may be affected: BC500, CC400W and TC500.

Affected products

• Synology BC500 Firmware: before 1.2.0-0525 (fixed in 1.2.0-0525)
• Synology CC400W Firmware: before 1.2.0-0525 (fixed in 1.2.0-0525)
• Synology TC500 Firmware: before 1.2.0-0525 (fixed in 1.2.0-0525)

Published 2025-03-19. Last modified 2026-06-17.