Synology Router Manager (SRM) 1.1.x Path Traversal Vulnerability (Synology-SA-17:71) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-32955

Improper neutralization of special elements used in an OS command 'OS Command Injection' vulnerability in DHCP Client Functionality in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors...

CVE-2023-32956

CVE-2023-32956 affects Synology Router Manager (SRM) via an OS command injection vulnerability in the CGI component. Impact is remote arbitrary code execution with high severity (CVSSv3.1: 9.8, network vector, no user interaction, privileges: none; confidentiality, integrity, availability all hig...

CVE-2023-32955

Synology SRM is affected by CVE-2023-32955 due to an OS command injection in the DHCP Client functionality. The root cause is improper neutralization of special elements used in a system call, allowing network-adjacent attackers to execute arbitrary commands. Documents from ZDI state exploitation...

CVE-2023-0077

Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager SRM before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via unspecified vectors...

CVE-2023-0077

CVE-2023-0077 affects Synology Router Manager (SRM) CGI, with an integer overflow in the CGI component that handles inputs. Reported for SRM versions prior to 1.2.5-8227-6 and 1.3.1-9346-3, the vulnerability allows remote attackers to overflow buffers via unspecified vectors. The issue is documen...

CVE-2022-43932

CVE-2022-43932 is an injection-type issue in the CGI component of Synology Router Manager (SRM) that improperly neutralizes certain output, enabling a remote attacker to read arbitrary files. Affected SRM versions are prior to 1.2.5-8227-6 and prior to 1.3.1-9346-3 (i.e., 1.2.x < 1.2.5-8227-6 ...

Synology Releases Patch for Critical RCE Vulnerability Affecting VPN Plus Servers

Synology has released security updates to address a critical flaw impacting VPN Plus Server that could be exploited to take over affected systems. Tracked as CVE-2022-43931, the vulnerability carries a maximum severity rating of 10 on the CVSS scale and has been described as an out-of-bounds writ...

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-6, 1.3.x < 1.3.1-9346-3 Multiple Vulnerabilities (Synology-SA-22:25) - Remote Known Vulnerable Versions Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-6, 1.3.x < 1.3.1-9346-3 Multiple Vulnerabilities (Synology-SA-22:23) - Unreliable Remote Version Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-6, 1.3.x < 1.3.1-9346-3 Multiple Vulnerabilities (Synology-SA-22:23) - Remote Known Vulnerable Versions Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager (SRM) 1.2.x < 1.2.5-8227-5, 1.3.x < 1.3-9193-1 Multiple Vulnerabilities (Synology-SA-22:06) - Remote Known Vulnerable Versions Check

Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router Manager (SRM) 1.2.x OpenSSL Vulnerability (Synology-SA-22:04)

Synology Router Manager SRM is prone to a denial of service DoS vulnerability in OpenSSL. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Synology Router / Router Manager (SRM) Detection (HTTP)

HTTP based detection of Synology router devices, Router Manager SRM OS and manager application. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Synology Router / Router Manager (SRM) Detection Consolidation

Consolidation of Synology router devices, Router Manager SRM OS and manager application detections. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

QNAP Advises to Mitigate Remote Hacking Flaws Until Patches are Available

Network-attached storage NAS appliance maker QNAP on Wednesday said it's working on updating its QTS and QuTS operating systems after Netatalk last month released patches to contain seven security flaws in its software. Netatalk is an open-source implementation of the Apple Filing Protocol AFP,...

PT-2021-14541 · Sap · Sap Netweaver As Abap +1

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS ABAP and ABAP Platform versions 700, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, 755 Description: The issue is related to the function module SRM RFC SUBMIT REPORT which fails to validate authorization of an...

CVE-2021-21524

Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is...

CVE-2021-21524

Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is...

Deserialization of untrusted data

Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is...