WID-SEC-W-2025-0567

DeutschShown in its original language — a full translation is planned for a future version.

Synology Router Manager: Mehrere Schwachstellen

view advisory published 2025-03-13

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Synology Router Manager ausnutzen, um Dateien zu lesen oder zu schreiben.

describes (4)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-29846US	—	0.64% (51st)	—	2025-12-04
A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.
CVE-2025-29845US	—	0.43% (37th)	—	2025-12-04
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
CVE-2025-29844US	—	0.43% (37th)	—	2025-12-04
A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.
CVE-2025-29843US	—	0.37% (30th)	—	2025-12-04
A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.