CVE-2024-53286

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DDNS Record functionality in Synology Router Manager SRM before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors...

CVE-2024-53286

CVE-2024-53286 affects Synology Router Manager (SRM) prior to 1.3.1-9346-11, with an OS command injection in the DDNS Record functionality that lets remote authenticated administrators execute arbitrary code via unspecified vectors. Root cause: improper neutralization of special elements used in ...

PT-2025-30519 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-11 Description: A flaw exists in the DDNS Record functionality that allows remote authenticated users with administrator privileges to execute arbitrary code. The issue is due to improp...

Synology Router Manager 跨站脚本漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A cross-site scripting vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-11, which originates from cross-site scripting and could lead to the injection of...

PT-2025-30520 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-11 Description: A cross-site scripting XSS issue exists in the VPN Setting functionality. This allows remote authenticated users with administrator privileges to inject arbitrary web...

Synology Router Manager 操作系统命令注入漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. An operating system command injection vulnerability exists in Synology Router Manager SRM versions prior to 1.3.1-9346-11, which stems from OS command injection and could lead to the...

PT-2025-30521 · Synology · Synology Router Manager

Name of the Vulnerable Software and Affected Versions: Synology Router Manager SRM versions prior to 1.3.1-9346-11 Description: A cross-site scripting XSS issue exists in the NTP Region functionality. This allows remote authenticated users with administrator privileges to inject arbitrary web...

Synology Router Manager 跨站脚本漏洞

Synology Router Manager SRM is a software used to configure and manage Synology routers from China-based Synology. A cross-site scripting vulnerability exists in Synology Router Manager versions prior to 1.3.1-9346-11, which originates from cross-site scripting and could lead to the injection of...

Synology Router Manager (SRM) 1.3.x File Write Vulnerability (Synology-SA-25:07)

Synology Router Manager SRM is prone to a file write vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2024-53281

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Network WOL functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users to read or write specific files containing non-sensitive information and conduct...

CVE-2024-53280

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in network center policy route functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files...

CVE-2024-53279

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in file station functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensiti...

CVE-2024-53282

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing...

CVE-2024-53285

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in DDNS Record functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing non-sensitiv...

CVE-2024-53283

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in Router Port Forward functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing...

CVE-2024-53284

Improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability in WiFi Connect Setting functionality in Synology Router Manager SRM before 1.3.1-9346-10 allows remote authenticated users with administrator privileges to read or write specific files containing...

CVE-2023-41740

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in cgi component in Synology Router Manager SRM before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors...

CVE-2023-41741

Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager SRM before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2023-41739

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager SRM before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors...

CVE-2023-41738

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in Directory Domain Functionality in Synology Router Manager SRM before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors...