Synology Surveillance Station IPSpeaker Component Insufficiently Protected Credentials Vulnerability

A vulnerability allowing remote authenticated users with administrator privileges to access sensitive information has been identified in the IPSpeaker component of Synology Surveillance Station. This issue affects versions prior to 9.2.2-11575 and 9.2.2-9575.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information.

Remediation

Users can upgrade to Synology Surveillance Station versions 9.2.2-11575 or 9.2.2-9575, depending on their current version, to address this vulnerability.