Lucene search

[email protected]CVE-2023-41739

HistoryAug 31, 2023 - 10:15 a.m.

CVE-2023-41739

2023-08-3110:15:08

[email protected]

web.nvd.nist.gov

cve-2023-41739

uncontrolled resource consumption

synology router manager

srm

denial-of-service

vulnerability

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

39.2%

JSON

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors.

CPENameOperatorVersion
synology:router_managersynology router managerlt1.3.1-9346-6
synology:router_managersynology router managereq1.1-6338
synology:router_managersynology router managereq1.0-5781
synology:router_managersynology router managereq1.0.1-6007
synology:router_managersynology router managereq1.0.2-6022
synology:router_managersynology router managereq1.1.5-6542
synology:router_managersynology router managereq1.1.5-6542-2
synology:router_managersynology router managereq1.2
synology:router_managersynology router managereq1.1.6-6931-3
synology:router_managersynology router managereq1.3.1-9346

CPE	Name	Operator	Version
synology:router_manager	synology router manager	lt	1.3.1-9346-6
synology:router_manager	synology router manager	eq	1.1-6338
synology:router_manager	synology router manager	eq	1.0-5781
synology:router_manager	synology router manager	eq	1.0.1-6007
synology:router_manager	synology router manager	eq	1.0.2-6022
synology:router_manager	synology router manager	eq	1.1.5-6542
synology:router_manager	synology router manager	eq	1.1.5-6542-2
synology:router_manager	synology router manager	eq	1.2
synology:router_manager	synology router manager	eq	1.1.6-6931-3
synology:router_manager	synology router manager	eq	1.3.1-9346

Rows per page:

1-10 of 651

References

www.synology.com/en-global/security/advisory/Synology_SA_23_10

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6 Medium

AI Score

Confidence

High

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.001 Low

EPSS

Percentile

39.2%

JSON

Related for CVE-2023-41739

zdi1 cvelist1 prion1 openvas2