RM
Product
Router Manager
58
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 21Medium 29Low 1
Watch
Add Router Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-13289 | 5.3 | Apr 1 | Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the… Affected: 1.1 before 1.1.7-6941-2 |
| CVE-2018-7170 | 5.3 | Mar 6 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order… Affected: 1.1 before 1.1.6-6931-3 |
| CVE-2017-12077 | 4.9 | Aug 28 | Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to… Affected: through 1.1.3-6447-4 |
| CVE-2025-29845 | 4.3 | Dec 4 | A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +8 more |
| CVE-2025-29844 | 4.3 | Dec 4 | A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +8 more |
| CVE-2018-13292 | 4.3 | Apr 1 | Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive… Affected: 1.1 before 1.1.7-6941-2 |
| CVE-2018-13290 | 4.3 | Apr 1 | Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or… Affected: 1.1 before 1.1.7-6941-2 |
| CVE-2019-9495 | 3.7 | Apr 17 | The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns Affected: before 1.2.3-8017 |