Synology recommends that anyone who owns a branded camera or BeeStation install the latest patch immediately.
Anyone who owns a Synology camera or BeeStation NAS should update their device immediately. The cameras are specifically the Synology Camera BC500, TC500 and CC400W. This is what the manufacturer reports:
“The vulnerabilities allow remote attackers to execute arbitrary code, remote attackers to bypass security restrictions, and remote attackers to conduct denial-of-service attacks.” The message says to update to firmware version 1.1.3-0442 or newer .
For BeeStation devices, an entry-level NAS model from the brand, owners should urgently update to version 1.1-65373. Synology: “A security flaw allows remote attackers to execute arbitrary code via a sensitive version of Synology BeeStation Manager (BSM).”
Both leaks are classified as critical by Synology. Patch now is the message.
The BeeStation systems were only launched at the beginning of the year. We like to describe it as a simple NAS tailored for those who don’t know what a NAS is. The device promises to bring centralized self-storage to a large audience. You can read the review of the Synology Camera TC500 here.