Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

59 records

Vendor: Synology Component: Router Manager Clear all filters
TI-2024-35750 CVE-2024-53288 · GHSA-4h5j-mcxh-3f2q

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00241 Published 2025-07-23 Fixed in 1.3.1-9346-11 CWE-79
TI-2024-35749 CVE-2024-53287 · GHSA-42mw-h6gp-qf8x

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00241 Published 2025-07-23 Fixed in 1.3.1-9346-11 CWE-79
TI-2024-35748 CVE-2024-53286 · GHSA-wv44-h7fg-jf4w

OS command injection in Synology Router Manager

Priority LOW 36

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated user…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.012 Published 2025-07-23 Fixed in 1.3.1-9346-11 CWE-78
TI-2024-35747 CVE-2024-53285 · GHSA-73xm-gvm5-fvj6

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users with…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35746 CVE-2024-53284 · GHSA-m7m4-7vv7-53gq

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated u…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35745 CVE-2024-53283 · GHSA-2mjf-6957-c593

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated us…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35744 CVE-2024-53282 · GHSA-8hwf-74p7-79cc

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticate…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35743 CVE-2024-53281 · GHSA-2f87-f3xg-gj6p

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users to r…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35741 CVE-2024-53279 · GHSA-xw9r-xwcq-fwq5

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenticated users wit…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-35742 CVE-2024-53280 · GHSA-hhq4-hjcp-jxv5

Cross-site scripting in Synology Router Manager

Priority LOW 26

Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM) before 1.3.1-9346-10 allows remote authenti…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00271 Published 2024-12-09 Fixed in 1.3.1-9346-10 CWE-79
TI-2024-10561 CVE-2024-11398 · GHSA-79vx-rgpq-6669

Path traversal in Synology Router Manager

Priority LOW 36

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in OTP reset functionality in Synology Router Manager (SRM) before 1.3.1-9346-9 allows remote authenticated users to delete arb…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00645 Published 2024-12-04 Fixed in 1.3.1-9346-9 CWE-22
TI-2024-26301 CVE-2024-39348 · GHSA-5j7p-wp6w-m577

Download of code without integrity check vulnerability in AirPrint functionality in…

Priority LOW 34

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via uns…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00266 Published 2024-06-28 Fixed in 1.3.1-9346-8, 1.2.5-8227-11 CWE-494
TI-2024-26300 CVE-2024-39347 · GHSA-fp5r-m92v-wrwr

Incorrect default permissions in Synology Router Manager

Priority LOW 27

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resource…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00523 Published 2024-06-28 Fixed in 1.3.1-9346-8, 1.2.5-8227-11 CWE-276
TI-2023-22156 CVE-2023-41741 · GHSA-5m7w-3v9x-xj3w

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component…

Priority MEDIUM 40

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vecto…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00718 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22155 CVE-2023-41740 · GHSA-546p-cf3x-vwc8

Improper limitation of a pathname to a restricted directory ('Path Traversal')…

Priority LOW 31

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspec…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00794 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22154 CVE-2023-41739 · GHSA-89p4-79q6-8w43

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router…

Priority LOW 30

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00781 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22153 CVE-2023-41738 · GHSA-7jqv-587h-9mvw

Improper neutralization of special elements used in an OS command ('OS Command…

Priority MEDIUM 43

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0154 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-00137 CVE-2023-0142 · GHSA-8f24-4fhw-xqcc

Uncontrolled search path in Synology DiskStation Manager

Priority LOW 39

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrat…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0097 Published 2023-06-13 Fixed in 7.2, 7.1-42661 +2 CWE-427
TI-2023-16144 CVE-2023-32956 · GHSA-44px-68jg-57xp

Improper neutralization of special elements used in an OS command ('OS Command…

Priority MEDIUM 52

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to e…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01534 Published 2023-05-16 Fixed in 1.3.1-9346-3, 1.2.5-8227-6
TI-2023-16143 CVE-2023-32955 · GHSA-6cxc-x48g-7mv3

Improper neutralization of special elements used in an OS command ('OS Command…

Priority MEDIUM 40

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-th…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01205 Published 2023-05-16 Fixed in 1.2.5-8227-6, 1.3.1-9346-3
Load more