Synology-SA-18:34 SRM
Publish Time: 2018-06-28 11:59:22 UTC+8
Last Updated: 2021-04-14 15:46:17 UTC+8
- Severity
- Important
- Status
- Resolved
Abstract
Multiple vulnerabilities allow remote authenticated users to execute arbitrary OS commands or obtain sensitive information via a susceptible version of Synology Router Manager (SRM).
Affected Products
| Product | Severity | Fixed Release Availability |
|---|---|---|
| SRM 1.1 | Important | Upgrade to 1.1.7-6941-1 or above. |
Mitigation
None
Detail
CVE-2018-13285
- Severity: Important
- CVSS3 Base Score: 7.5
- CVSS3 Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
- Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
CVE-2018-13287
- Severity: Moderate
- CVSS3 Base Score: 6.5
- CVSS3 Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration.
Acknowledgement
freetsubasa (https://twitter.com/freetsubasa)
Revision
| Revision | Date | Description |
|---|---|---|
| 1 | 2018-06-28 | Initial public release. |
| 2 | 2019-04-01 | Disclosed vulnerability details. |