CVE-2024-29231: Security bypass vulnerability in Synology Surveillance Station. This flaw stems from improper validation of array index within the UserPrivilege.Enum webapi component. Exploitation allows remote authenticated users to circumvent security constraints through unspecified methods. Though the CVSS score is high at 8.8, SOCRadar's Vulnerability Risk Score (SVRS) is 30. While the CVSS indicates a significant risk, the lower SVRS suggests the vulnerability might not be actively exploited or widely discussed in threat intelligence circles. This Synology flaw is significant because it allows unauthorized privilege escalation, potentially leading to unauthorized access and control over the affected Surveillance Station. Update your Synology Surveillance Station to versions 9.2.0-9289 or 9.2.0-11289, or later, to remediate this issue and mitigate potential attacks.