PT-2020-4927 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.2.4-8081 Description: The issue concerns a problem with the QuickConnect feature in Synology Router Manager, which allows for a man-in-the-middle attack. This could enable an attacker to spoof...

Synology SRM SafeAccess 1.2.1-0220 code execution Vvulnerability

Summary An exploitable code execution vulnerability exists in the SafeAccess 1.2.1-0220 package of Synology SRM 1.2.3 RT2600ac 8017-5. A specially crafted domain access request can lead to an SQL injection. An attacker can send an HTTP request to trigger this vulnerability. Tested Versions Synolo...

Synology Router Manager Buffer Overflow Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. A buffer overflow vulnerability exists in Network Center in Synology SRM versions prior to 1.2.3-8017-2, which can be exploited by remote attackers to cause a denial of...

CVE-2019-11823

CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...

CVE-2019-11823

CVE-2019-11823 is a CRLF-injection DoS vulnerability in the Synology Router Manager (SRM) Network Center, exploitable on SRM versions before 1.2.3-8017-2. An attacker can send crafted network traffic to trigger an out-of-bounds read, crashing the application. Multiple sources (NVD, CVE lists, Syn...

CVE-2019-11823

CRLF injection vulnerability in Network Center in Synology Router Manager SRM before 1.2.3-8017-2 allows remote attackers to cause a denial of service out-of-bounds read and application crash via crafted network traffic...

PT-2020-9208 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.2.3-8017-2 Description: The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and application crash, via crafted network traffic. This is due to a CR...

Synology Router Manager Information Disclosure Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in SYNO.Core.ACL in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from errors such as...

Synology Router Manager Command Injection Vulnerability (CNVD-2019-08959)

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. A command injection vulnerability exists in ftpd in Synology SRM versions prior to 1.1.7-6941-1. The vulnerability, which originates from a failure of a network system or...

Synology Router Manager Privilege Permission and Access Control Issues Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. A vulnerability exists in Synology Router Manager with privilege permission and access control issues. An attacker could exploit this vulnerability to obtain sensitive...

Synology Router Manager Information Disclosure Vulnerability (CNVD-2019-08961)

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in the /usr/syno/etc/mount.conf file in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from...

Synology Router Manager Information Disclosure Vulnerability (CNVD-2019-08958)

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology Inc. of Taiwan, China. An information disclosure vulnerability exists in SYNO.FolderSharing.List in Synology SRM versions prior to 1.1.7-6941-2. The vulnerability, which originates from errors su...

CVE-2018-13285

Command injection vulnerability in ftpd in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the 1 MKD or 2 RMD command...

Information disclosure

Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager SRM before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the 1 folderpath or 2 realpath parameter...

Information disclosure

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the filepath parameter...

CVE-2018-13292

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...

Default configuration

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...

CVE-2018-13290

Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or obtain sensitive information of files via the filepath parameter...

Information disclosure

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager SRM before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration...

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...