DeutschShown in its original language — a full translation is planned for a future version.
Synology Router Manager: Mehrere Schwachstellen ermöglichen Codeausführung
view advisory published 2024-10-17
Ein entfernter authentisierter Angreifer kann mehrere Schwachstellen im Synology Router Manager ausnutzen, um beliebigen Code auszuführen, Daten zu manipulieren und vertrauliche Informationen preiszugeben.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-53288US | — | — | ||
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in NTP Region functionality in Synology Router Manager (SRM) before 1.3.1-9346-11… | ||||
| CVE-2024-53287US | — | — | ||
Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in VPN Setting functionality in Synology Router Manager (SRM) before 1.3.1-9346-1… | ||||
| CVE-2024-53286US | — | — | ||
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-… | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan