Publish Time: 2018-06-28 11:59:22 UTC+8
Last Updated: 2021-04-14 15:46:17 UTC+8
Abstract
Multiple vulnerabilities allow remote authenticated users to execute arbitrary OS commands or obtain sensitive information via a susceptible version of Synology Router Manager (SRM).
Affected Products
Product | Severity | Fixed Release Availability |
---|---|---|
SRM 1.1 | Important | Upgrade to 1.1.7-6941-1 or above. |
Mitigation
None
Detail
CVE-2018-13285
CVE-2018-13287
Acknowledgement
freetsubasa (https://twitter.com/freetsubasa)
Revision
Revision | Date | Description |
---|---|---|
1 | 2018-06-28 | Initial public release. |
2 | 2019-04-01 | Disclosed vulnerability details. |