Vulnerabilities > CVE-2023-41740 - Unspecified vulnerability in Synology Router Manager

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

synology

NVD

Published: 2023-08-31

Updated: 2023-11-07

Summary

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors.

Vulnerable Configurations

Part	Description	Count
Application	Synology Synology Router Manager 1.0-5766 Synology Router Manager 1.0-5781 Synology Router Manager 1.0-5781-1 Synology Router Manager 1.0-5781-2 Synology Router Manager 1.0-5781-3 Synology Router Manager 1.0.1-6007 Synology Router Manager 1.0.1-6007-1 Synology Router Manager 1.0.1-6007-2 Synology Router Manager 1.0.2-6022 Synology Router Manager 1.0.2-6022-1 Synology Router Manager 1.0.3-6030 Synology Router Manager 1.0.3-6030-1 Synology Router Manager 1.0.3-6030-2 Synology Router Manager 1.0.3-6030-3 Synology Router Manager 1.1 Synology Router Manager 1.1-6338 Synology Router Manager 1.1-6338-1 Synology Router Manager 1.1-6338-2 Synology Router Manager 1.1.1-6414 Synology Router Manager 1.1.1-6414-1 Synology Router Manager 1.1.2-6425 Synology Router Manager 1.1.2-6425-1 Synology Router Manager 1.1.2-6425-2 Synology Router Manager 1.1.2-6425-3 Synology Router Manager 1.1.3-6447 Synology Router Manager 1.1.3-6447-1 Synology Router Manager 1.1.3-6447-2 Synology Router Manager 1.1.3-6447-3 Synology Router Manager 1.1.3-6447-4 Synology Router Manager 1.1.4-6509 Synology Router Manager 1.1.4-6509-1 Synology Router Manager 1.1.4-6509-2 Synology Router Manager 1.1.4-6509-3 Synology Router Manager 1.1.4-6509-4 Synology Router Manager 1.1.5-6542 Synology Router Manager 1.1.5-6542-1 Synology Router Manager 1.1.5-6542-2 Synology Router Manager 1.1.5-6542-3 Synology Router Manager 1.1.5-6542-4 Synology Router Manager 1.1.6-6931 Synology Router Manager 1.1.6-6931-1 Synology Router Manager 1.1.6-6931-2 Synology Router Manager 1.1.6-6931-3 Synology Router Manager 1.1.7-6941 Synology Router Manager 1.1.7-6941-1 Synology Router Manager 1.1.7-6941-2 Synology Router Manager 1.1.7-6941-3 Synology Router Manager 1.2 Synology Router Manager 1.2-7742 Synology Router Manager 1.2-7742-1 Synology Router Manager 1.2-7742-2 Synology Router Manager 1.2-7742-3 Synology Router Manager 1.2-7742-4 Synology Router Manager 1.2-7742-5 Synology Router Manager 1.2.1-7779 Synology Router Manager 1.2.1-7779-1 Synology Router Manager 1.2.2-7915 Synology Router Manager 1.2.3-8017-2 Synology Router Manager 1.2.3-8087 Synology Router Manager 1.2.4-8081 Synology Router Manager 1.2.5-8227-6 Synology Router Manager 1.3 Synology Router Manager 1.3.1-9346 Synology Router Manager 1.3.1-9346-3	69

References

https://www.synology.com/en-global/security/advisory/Synology_SA_23_10