An improper preservation of permissions flaw in the Archiving Push feature of Synology Surveillance Station allows a remote authenticated user with administrator privileges to write files on the system. This flaw can enable an attacker to alter configuration files or upload malicious payloads, potentially leading to further compromise or unauthorized data modification. The vulnerability can be exploited by any user holding admin credentials, giving them the ability to affect files that are normally protected.

Synology Surveillance Station versions earlier than 9.2.2-11575 and 9.2.2-9575 are affected. No other products or versions are currently listed as vulnerable.

The CVSS base score of 2.7 indicates low overall severity, and there is no EPSS data available. The vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be remote authenticated, requiring administrative credentials. While the risk is low, compromised admin privileges could allow file write capabilities that may facilitate further attacks or data tampering.