CrowdSecLive Exploit Tracker
Limited ExploitationCVE-2024-10443Public Exploit

BeePhotos - RCE (CVE-2024-10443)

PublishedNov 15, 2024
First SeenJul 15, 2025
Last Seen
Reported
CVSS9.8
Synology
SynologyBeePhotos
Synology
SynologySynology Photos
nas

Description

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Task Manager component in Synology BeePhotos before 1.0.2-10026 and 1.1.0-10053 and Synology Photos before 1.6.2-0720 and 1.7.0-0795 allows remote attackers to execute arbitrary code via unspecified vectors.

psychologyCrowdSec Analysis

CVE-2024-10443, a critical, unauthenticated command-injection vulnerability in Task Manager lets attackers run arbitrary root code remotely on vulnerable Synology NAS devices.

CrowdSec has been tracking this vulnerability and its exploits since 17th of June 2025.

CrowdSec has not observed any significant exploitation activity targeting CVE-2024-10443 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.

By sending specially crafted input, attacker can inject shell commands executed as root—yielding full remote code execution with no user interaction

lock

Full Intelligence Available

Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.

EventDate
CVE Published2024-11-15
Rule Released2025-06-17
CrowdSec First Seen2025-07-15

Related Weaknesses

CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

arrow_forward

Remediation & Protection

lock to download blocklists, subscribe to firewalls, and access IP intelligence.

External References