Medium WID-SEC-2025-0567 4 CVEs

Synology Router Manager: Mehrere Schwachstellen

Published Mar 13, 2025 · Updated Dec 4, 2025 · Revision 2 · de-DE

Vendor: Synology Product: Router Manager

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Synology Router Manager ausnutzen, um Dateien zu lesen oder zu schreiben.

Product

Der Synology Router Manager (SRM) ist das Betriebssystem, mit dem jeder Synology Router betrieben wird.

Vulnerabilities 4

High 7.2

CVE-2025-29846

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

Synology Synology Router Manager (SRM)

Dec 4, 2025
Medium 5.4

CVE-2025-29843

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

Synology Synology Router Manager (SRM)

Dec 4, 2025
Medium 4.3

CVE-2025-29844

A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.

Synology Synology Router Manager (SRM)

Dec 4, 2025
Medium 4.3

CVE-2025-29845

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

Synology Synology Router Manager (SRM)

Dec 4, 2025

Revision history

2025-12-04 #2
Referenz(en) aufgenommen: EUVD-2025-201172, EUVD-2025-201173, EUVD-2025-201175, EUVD-2025-201176
2025-03-13 #1
Initiale Fassung

References

Synology Security Advisory Synology-SA-25:04 SRM vom 2025-03-13
https://www.synology.com/en-global/support/security/Synology_SA_25_04