Synology Router Manager vulnerabilities

• synology router manager, router manager (srm) +1 more A vulnerability in portenable cgi allows remote authenticated users to get the status of... CVE-2025-29846 7.2 HighDecember 4, 2025
• synology router manager, router manager (srm) +1 more A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files. CVE-2025-29845 4.3 MediumDecember 4, 2025
• synology router manager, router manager (srm) +1 more A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata... CVE-2025-29844 4.3 MediumDecember 4, 2025
• synology router manager, router manager (srm) +1 more A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image... CVE-2025-29843 5.4 MediumDecember 4, 2025
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53288 5.9 MediumJuly 23, 2025
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53287 5.9 MediumJuly 23, 2025
• synology router manager, router manager (srm) +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2024-53286 7.2 HighJuly 23, 2025
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53285 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53284 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53283 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53282 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53281 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53279 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper neutralization of input during web page generation ('Cross-site Scripting')... CVE-2024-53280 5.9 MediumDecember 9, 2024
• synology router manager, router manager (srm) +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2024-11398 8.1 HighDecember 4, 2024
• synology router manager, router manager (srm) +1 more Download of code without integrity check vulnerability in AirPrint functionality in Synology... CVE-2024-39348 7.5 HighJune 28, 2024
• synology router manager, router manager (srm) +1 more Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager ... CVE-2024-39347 5.9 MediumJune 28, 2024
• synology router manager, router manager (srm) +1 more Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in... CVE-2023-41741 5.3 MediumAugust 31, 2023
• synology router manager, router manager (srm) +1 more Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in... CVE-2023-41740 5.3 MediumAugust 31, 2023
• synology router manager, router manager (srm) +1 more Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager ... CVE-2023-41739 4.9 MediumAugust 31, 2023
• synology router manager, router manager (srm) +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2023-41738 7.2 HighAugust 31, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Use of insufficiently random values vulnerability in User Management Functionality in Synology... CVE-2023-2729 5.9 MediumJune 13, 2023
• synology diskstation manager (dsm), diskstation manager, diskstation manager unified controller +3 more +5 more Uncontrolled search path element vulnerability in Backup Management Functionality in Synology... CVE-2023-0142 6.5 MediumJune 13, 2023
• synology router manager, router manager (srm) +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2023-32956 9.8 CriticalMay 16, 2023
• synology router manager, router manager (srm) +1 more Improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2023-32955 8.1 HighMay 16, 2023
• synology router manager, router manager (srm) +1 more Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM)... CVE-2023-0077 6.5 MediumJanuary 5, 2023
• synology router manager, router manager (srm) +1 more Improper neutralization of special elements in output used by a downstream component ('Injection'... CVE-2022-43932 7.5 HighJanuary 5, 2023
• synology router manager, router manager (srm) +1 more Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a Set... CVE-2020-27658 7.1 HighOctober 29, 2020
• synology router manager, router manager (srm) +1 more Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager ... CVE-2020-27657 6.5 MediumOctober 29, 2020
• synology router manager, router manager (srm) +1 more Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows... CVE-2020-27655 6.5 MediumOctober 29, 2020
• synology router manager, router manager (srm) +1 more Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081... CVE-2020-27654 9.8 CriticalOctober 29, 2020
• synology router manager, router manager (srm), diskstation manager +2 more Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4... CVE-2020-27653 8.3 HighOctober 29, 2020
• synology router manager, router manager (srm) +1 more Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session... CVE-2020-27651 5.8 MediumOctober 29, 2020
• synology router manager, router manager (srm) +1 more Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM)... CVE-2020-27649 8.3 HighOctober 29, 2020
• synology router manager, router manager (srm) +1 more CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017... CVE-2019-11823 8.6 HighMay 4, 2020
• broadcom bcm4339 firmware, wifi drivers, synology router manager +2 more Broadcom wl driver is vulnerable to heap buffer overflow CVE-2019-9502 Fix available 7.9 HighFebruary 3, 2020
• broadcom bcm4339 firmware, wifi drivers, synology router manager +2 more Broadcom wl driver is vulnerable to heap buffer overflow CVE-2019-9501 Fix available 7.9 HighFebruary 3, 2020
• red hat samba, canonical ubuntu linux, opensuse leap +4 more +6 more There is a use-after-free issue in all samba 4.9.x versions before 4.9.18, all samba 4.10.x... CVE-2019-19344 Fix available 6.5 MediumJanuary 21, 2020
• red hat samba, canonical ubuntu linux, debian linux +7 more +9 more All samba versions 4.9.x before 4.9.18, 4.10.x before 4.10.12 and 4.11.x before 4.11.5 have an... CVE-2019-14907 Fix available 6.5 MediumJanuary 21, 2020
• w1.fi hostapd, wi-fi alliance hostapd with sae support, fedoraproject fedora +7 more +9 more The implementations of SAE in hostapd and wpa_supplicant are vulnerable to side-channel attacks CVE-2019-9494 Fix available 5.9 MediumApril 17, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 more The implementations of EAP-PWD in wpa_supplicant EAP Peer do not validate the scalar and element values in EAP-pwd-Commit CVE-2019-9499 Fix available 8.1 HighApril 10, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, hostapd with sae support +10 more +12 more The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit CVE-2019-9498 Fix available 8.1 HighApril 10, 2019
• w1.fi hostapd, wi-fi alliance hostapd with eap-pwd support, debian linux +8 more +10 more The implementations of EAP-PWD in hostapd and wpa_supplicant are vulnerable to side-channel attacks as a result of cache access patterns CVE-2019-9495 Fix available 3.7 LowApril 10, 2019
• samba, fedoraproject fedora, synology directory server +4 more +6 more A vulnerability was found in Samba from version (including) 4.9 to versions before 4.9.6 and 4.10... CVE-2019-3870 Fix available 6.1 MediumApril 9, 2019
• synology router manager, router manager (srm) +1 more Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM)... CVE-2018-13292 4.3 MediumApril 1, 2019
• synology router manager, router manager (srm) +1 more Information exposure vulnerability in SYNO.Core.ACL in Synology Router Manager (SRM) before 1.1.7... CVE-2018-13290 4.3 MediumApril 1, 2019
• synology router manager, router manager (srm) +1 more Information exposure vulnerability in SYNO.FolderSharing.List in Synology Router Manager (SRM)... CVE-2018-13289 5.3 MediumApril 1, 2019
• synology router manager, router manager (srm) +1 more Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM)... CVE-2018-13287 6.5 MediumApril 1, 2019
• synology router manager, router manager (srm) +1 more Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1... CVE-2018-13285 7.5 HighApril 1, 2019
• synology router manager, router manager (srm) +1 more Cross-site scripting (XSS) vulnerability in info.cgi in Synology Router Manager (SRM) before 1.1... CVE-2018-8918 6.5 MediumDecember 24, 2018
• Show olderLoading…