Medium WID-SEC-2023-1426 2 CVEs

Synology Router Manager: Mehrere Schwachstellen

Published Jun 12, 2023 · Updated Jun 18, 2023 · Revision 2 · de-DE

Vendor: Synology Product: DiskStation Manager < 7.2-64561 Product: Router Manager Product: Router Manager 1.2 Product: Router Manager 1.3

Summary

Ein Angreifer kann mehrere Schwachstellen in Synology Router Manager ausnutzen, um Informationen offenzulegen oder Daten zu manipulieren.

Product

Der Synology Router Manager (SRM) ist das Betriebssystem, mit dem jeder Synology Router betrieben wird.

Vulnerabilities 2

Medium 6.5

CVE-2023-0142

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM)…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023
Medium 5.9

CVE-2023-2729

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM…

Synology DiskStation Manager (DSM) Synology Router Manager (SRM) Unified Controller (DSMUC)

Jun 13, 2023

Revision history

2023-06-18 #2
Mehrere Anpassungen
2023-06-12 #1
Initiale Fassung

References

Synology Security Advisory vom 2023-06-12
https://www.synology.com/en-global/support/security/Synology_SA_23_08
Synology Security Advisory vom 2023-06-12
https://www.synology.com/en-global/support/security/Synology_SA_23_06