Synology-SA-24:09 SRM
Publish Time: 2024-09-09 11:51:10 UTC+8
Last Updated: 2024-09-09 11:51:10 UTC+8
- Severity
- Moderate
- Status
- Resolved
Abstract
Multiple vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via a susceptible version of Synology Router Manager (SRM).
Affected Products
| Product | Severity | Fixed Release Availability |
|---|---|---|
| SRM 1.3 | Moderate | Upgrade to 1.3.1-9346-10 or above. |
Mitigation
None
Detail
Reserved
Revision
| Revision | Date | Description |
|---|---|---|
| 1 | 2024-09-09 | Initial public release. |