RM
Product
Router Manager
58
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 21Medium 29Low 1
Watch
Add Router Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-27655 | 10.0 | Oct 29 | Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via inbound QuickConnect traffic Affected: 1.2 before 1.2.4-8081 |
| CVE-2023-32956 | 9.8 | May 16 | Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and… Affected: 1.2 before 1.2.5-8227-6; 1.3 before 1.3.1-9346-3 |
| CVE-2023-0077 | 9.8 | Jan 5 | Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to overflow buffers via… Affected: 1.2 before 1.2.5-8227-6; 1.3 before 1.3.1-9346-3 |
| CVE-2020-27654 | 9.8 | Oct 29 | Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port (1) 7786/tcp or (2)… Affected: before 1.2.4-8081 |
| CVE-2018-1160 | 9.8 | Dec 20 | Netatalk before 3.1.12 is vulnerable to an out of bounds write in dsi_opensess.c Affected: 1.2 before 1.2-7742-5 |
| CVE-2017-14491 | 9.8 | Oct 4 | Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response Affected: 1.1 |
| CVE-2020-27649 | 9.0 | Oct 29 | Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain… Affected: 1.2 before 1.2.4-8081 |
Showing 7