Synology Security Advisory Resolved SA-23:10 SRM

Synology, Inc. had published a security advisory concerning the resolved vulnerability on versions of Synology Router Manager (SRM).

Publish time: 2023-07-27 14:58:08 UTC+8
Last updated: 2023-07-27 14:58:08 UTC+8
Severity: Important
Status: Resolved

Abstract
Multiple vulnerabilities allow remote attackers to read specific files, obtain sensitive information, and inject arbitrary web script or HTML, man-in-the-middle attackers to bypass security constraint, and remote authenticated users to execute arbitrary commands and conduct denial-of-service attacks via a susceptible version of Synology Router Manager (SRM).

Affected products

Mitigation: None
Detail: Reserved

Acknowledgement
Claroty Research – Vera Mens, Uri Katz, Noam Moshe, Sharon Brizinov

Revision