Improper access control vulnerability in lbd in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to execute arbitrary commands via port (1) 7786/tcp or (2) 7787/tcp.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSynology Router Manager
APPSynology< 1.2.4-8081
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
References
Related vulnerabilities
CVE-2023-32956CRITICAL9.8PL ✓same product
OS Command Injection w Synology Router Manager (SRM) — RCE bez uwierzytelnienia
CVE-2022-43931CRITICAL10.0PL ✓same product
Podatność out-of-bounds write w Synology VPN Plus Server — RCE bez uwierzytelnienia
CVE-2022-22683CRITICAL10.0PL ✓same product
Classic Buffer Overflow w Synology Media Server umożliwiający RCE
CVE-2018-1160CRITICAL9.8PL ✓same product
Netatalk: zapis poza zakresem pamięci umożliwia zdalne wykonanie kodu (RCE)
CVE-2017-14491CRITICAL9.8PL ✓same product
Heap-based buffer overflow w dnsmasq umożliwiający RCE lub DoS