This vulnerability is a classic buffer overflow in the AdminCenter module of Synology BeeStation Manager (BSM) and BeeStation OS versions prior to 1.3.2-65648. The flaw arises because the software copies input data into a buffer without verifying that the input size fits within the buffer's capacity. This can lead to memory corruption, enabling remote attackers to execute arbitrary code on affected systems. The vulnerability is remotely exploitable without privileges or user interaction, making it highly severe. The CVSS 3.1 base score is 9.8, reflecting critical impact on confidentiality, integrity, and availability. No vendor advisory or patch links are currently provided, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation allows remote attackers to execute arbitrary code on vulnerable Synology BeeStation Manager and BeeStation OS devices, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the system. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround information is provided, users should monitor Synology's advisories closely and plan to upgrade to version 1.3.2-65648 or later once available. Until then, restrict network access to the AdminCenter interface to trusted users only to reduce exposure.