Vulnerabilities > CVE-2023-41738 - Unspecified vulnerability in Synology Router Manager

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

synology

NVD

Published: 2023-08-31

Updated: 2023-11-07

Summary

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
Application	Synology Synology Router Manager 1.0-5766 Synology Router Manager 1.0-5781 Synology Router Manager 1.0-5781-1 Synology Router Manager 1.0-5781-2 Synology Router Manager 1.0-5781-3 Synology Router Manager 1.0.1-6007 Synology Router Manager 1.0.1-6007-1 Synology Router Manager 1.0.1-6007-2 Synology Router Manager 1.0.2-6022 Synology Router Manager 1.0.2-6022-1 Synology Router Manager 1.0.3-6030 Synology Router Manager 1.0.3-6030-1 Synology Router Manager 1.0.3-6030-2 Synology Router Manager 1.0.3-6030-3 Synology Router Manager 1.1 Synology Router Manager 1.1-6338 Synology Router Manager 1.1-6338-1 Synology Router Manager 1.1-6338-2 Synology Router Manager 1.1.1-6414 Synology Router Manager 1.1.1-6414-1 Synology Router Manager 1.1.2-6425 Synology Router Manager 1.1.2-6425-1 Synology Router Manager 1.1.2-6425-2 Synology Router Manager 1.1.2-6425-3 Synology Router Manager 1.1.3-6447 Synology Router Manager 1.1.3-6447-1 Synology Router Manager 1.1.3-6447-2 Synology Router Manager 1.1.3-6447-3 Synology Router Manager 1.1.3-6447-4 Synology Router Manager 1.1.4-6509 Synology Router Manager 1.1.4-6509-1 Synology Router Manager 1.1.4-6509-2 Synology Router Manager 1.1.4-6509-3 Synology Router Manager 1.1.4-6509-4 Synology Router Manager 1.1.5-6542 Synology Router Manager 1.1.5-6542-1 Synology Router Manager 1.1.5-6542-2 Synology Router Manager 1.1.5-6542-3 Synology Router Manager 1.1.5-6542-4 Synology Router Manager 1.1.6-6931 Synology Router Manager 1.1.6-6931-1 Synology Router Manager 1.1.6-6931-2 Synology Router Manager 1.1.6-6931-3 Synology Router Manager 1.1.7-6941 Synology Router Manager 1.1.7-6941-1 Synology Router Manager 1.1.7-6941-2 Synology Router Manager 1.1.7-6941-3 Synology Router Manager 1.2 Synology Router Manager 1.2-7742 Synology Router Manager 1.2-7742-1 Synology Router Manager 1.2-7742-2 Synology Router Manager 1.2-7742-3 Synology Router Manager 1.2-7742-4 Synology Router Manager 1.2-7742-5 Synology Router Manager 1.2.1-7779 Synology Router Manager 1.2.1-7779-1 Synology Router Manager 1.2.2-7915 Synology Router Manager 1.2.3-8017-2 Synology Router Manager 1.2.3-8087 Synology Router Manager 1.2.4-8081 Synology Router Manager 1.3 Synology Router Manager 1.3.1-9346	67

References

https://www.synology.com/en-global/security/advisory/Synology_SA_23_10