1.0.3.6030.2

DATE	CVE	VULNERABILITY TITLE	RISK
2018-06-08	CVE-2017-12078	Command Injection vulnerability in Synology Router Manager Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter. network low complexity synology CWE-77	7.2
2017-12-08	CVE-2017-15895	Path Traversal vulnerability in Synology Router Manager Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter. network low complexity synology CWE-22	6.5
2017-08-28	CVE-2017-12077	Resource Exhaustion vulnerability in Synology Router Manager Uncontrolled Resource Consumption vulnerability in SYNO.Core.PortForwarding.Rules in Synology Router Manager (SRM) before 1.1.4-6509 allows remote authenticated attacker to exhaust the memory resources of the machine, causing a denial of service attack. network low complexity synology CWE-400	4.9