Synology Security Advisory Resolved SA-22:25 SRM
Multiple vulnerabilities allow remote attackers to execute arbitrary command, conduct denial-of-service attacks or read arbitrary files via susceptible version of Synology Router Manager.
This is a Press Release edited by StorageNewsletter.com on December 27, 2022 at 2:00 pmSynology, Inc. had published a security advisory concerning its Synology Router Manager (SRM).
Publish time: 2022-12-22 13:44:47 UTC+8
Last updated: 2022-12-26 17:19:34 UTC+8
Severity: Critical
Status: Resolved
Abstract
Multiple vulnerabilities allow remote attackers to execute arbitrary command, conduct denial-of-service attacks or read arbitrary files via a susceptible version of Synology Router Manager (SRM).
Affected products
Mitigation: None
Detail: Reserved
Acknowledgement:
- Orange Tsai from Devcore
- Gaurav Baruah working with Trend Micro’s Zero Day Initiative
- Computest working with Trend Micro’s Zero Day Initiative
- Lukas Kupczyk from CrowdStrike
Revision: