Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
1 selected

4 records

Advisory: Synology Router Manager (SRM) — Synology-SA-23:10 SRM Clear all filters
TI-2023-22156 CVE-2023-41741 · GHSA-5m7w-3v9x-xj3w

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component…

Priority MEDIUM 40

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vecto…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00718 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22155 CVE-2023-41740 · GHSA-546p-cf3x-vwc8

Improper limitation of a pathname to a restricted directory ('Path Traversal')…

Priority LOW 31

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspec…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00794 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22154 CVE-2023-41739 · GHSA-89p4-79q6-8w43

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router…

Priority LOW 30

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00781 Published 2023-08-31 Fixed in 1.3.1-9346-6
TI-2023-22153 CVE-2023-41738 · GHSA-7jqv-587h-9mvw

Improper neutralization of special elements used in an OS command ('OS Command…

Priority MEDIUM 43

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0154 Published 2023-08-31 Fixed in 1.3.1-9346-6