Search vulnerabilities

Results 63

Export CSV
CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.

CVSS 3.0 · 6.5 Medium EPSS 1.3% KEV · Not listed
Vendors
Products
CVE-2018-13285

Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.

CVSS 3.0 · 7.5 High EPSS 2.4% KEV · Not listed
Vendors
Products
CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter.

CVSS 3.0 · 7.2 High EPSS 2.4% KEV · Not listed
Vendors
Products