RM
Product
Router Manager
58
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 7High 21Medium 29Low 1
Watch
Add Router Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-41739 | 6.5 | Aug 31 | Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct… Affected: before 1.3.1-9346-6 |
| CVE-2019-19344 | 6.5 | Jan 21 | There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x versions before 4.10.12 and all samba 4.11.x versions before 4.11.5, essentially due to… Affected: 1.2 |
| CVE-2019-14907 | 6.5 | Jan 21 | All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an issue where if it is set with "log level = 3" (or above) then the string obtained… Affected: 1.2 |
| CVE-2018-13287 | 6.5 | Apr 1 | Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information… Affected: before 1.1.7-6941-1 |
| CVE-2017-15895 | 6.5 | Dec 8 | Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files… Affected: before 1.1.5-6542-4 |
| CVE-2020-27658 | 6.1 | Oct 29 | Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to… Affected: 1.2 before 1.2.4-8081 |
| CVE-2019-3870 | 6.1 | Apr 9 | A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10.2 Affected: 1.2 |
| CVE-2024-53288 | 5.9 | Jul 23 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +6 more |
| CVE-2024-53287 | 5.9 | Jul 23 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +6 more |
| CVE-2024-53285 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53284 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect Setting functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53283 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Router Port Forward functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53282 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in WiFi Connect MAC Filter functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53281 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Network WOL functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53279 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in file station functionality in Synology Router Manager (SRM) before… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-53280 | 5.9 | Dec 9 | Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in network center policy route functionality in Synology Router Manager (SRM)… Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +5 more |
| CVE-2024-39347 | 5.9 | Jun 28 | Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to… Affected: 1.2 before 1.2.5-8227; 1.3 before 1.3.1-9346; 1.2.5-8227; 1.2.5-8227; 1.2.5-8227; 1.2.5-8227; +15 more |
| CVE-2020-27657 | 5.9 | Oct 29 | Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to eavesdrop… Affected: 1.2 before 1.2.4-8081 |
| CVE-2019-9494 | 5.9 | Apr 17 | The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side channel attacks as a result of observable timing differences and cache access patterns Affected: before 1.2.3-8087 |
| CVE-2025-29843 | 5.4 | Dec 4 | A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +8 more |
| CVE-2018-8918 | 5.4 | Dec 24 | Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host… Affected: before 1.1.7-6941 |
| CVE-2023-41740 | 5.3 | Aug 31 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote… Affected: before 1.3.1-9346-6 |
| CVE-2018-13289 | 5.3 | Apr 1 | Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote attackers to obtain sensitive information via the… Affected: 1.1 before 1.1.7-6941-2 |
| CVE-2018-7170 | 5.3 | Mar 6 | ntpd in ntp 4.2.x before 4.2.8p7 and 4.3.x before 4.3.92 allows authenticated users that know the private symmetric key to create arbitrarily-many ephemeral associations in order… Affected: 1.1 before 1.1.6-6931-3 |
| CVE-2017-12077 | 4.9 | Aug 28 | Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to… Affected: through 1.1.3-6447-4 |
| CVE-2025-29845 | 4.3 | Dec 4 | A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +8 more |
| CVE-2025-29844 | 4.3 | Dec 4 | A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information Affected: 1.3 before 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; 1.3.1-9346; +8 more |
| CVE-2018-13292 | 4.3 | Apr 1 | Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive… Affected: 1.1 before 1.1.7-6941-2 |
| CVE-2018-13290 | 4.3 | Apr 1 | Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to determine the existence of files or… Affected: 1.1 before 1.1.7-6941-2 |
Showing 29