ZDI-24-072: Synology RT6600ax Qualcomm LDB Service Improper Input Validation Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Synology RT6600ax routers. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5.

arbitrary code attackers authentication code code execution cvss exploit input input validation network qualcomm rating remote code remote code execution routers service synology validation vulnerability zdi