High · 7.2 CVE-2017-12078 EUVD-2017-3664GHSA-3m6m-cc4p-w39q

Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to exec…

Published Jun 8, 2018 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Router Manager (SRM)

Description

Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Router Manager (SRM)	unspecified – < 1.1.6-6931	1.1.6-6931

References

https://www.synology.com/en-global/support/security/Synology_SA_17_79