This vulnerability in Synology Surveillance Station affects the Archiving Push feature, where permissions are not properly preserved. Remote authenticated users with administrator privileges can exploit this flaw to write files with limited permissions. The CVSS 3.1 base score is 2.7, reflecting low impact primarily on integrity. The exact vectors for exploitation are unspecified. No official patch or remediation details are provided in the available data.

The impact is limited to integrity, allowing an authenticated administrator to write files improperly due to permission preservation issues. There is no impact on confidentiality or availability. The low CVSS score (2.7) indicates minimal risk under typical conditions. No known active exploitation has been reported.

Patch status is not yet confirmed — check the Synology vendor advisory for current remediation guidance. Until an official fix is available, restrict administrator access to trusted personnel only and monitor for unusual file modifications related to the Archiving Push functionality.