Medium · 4.3 CVE-2018-13292 EUVD-2018-5240GHSA-vj62-crww-hrw5

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authentic…

Published Apr 1, 2019 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Synology Router Manager (SRM)

Description

Information exposure vulnerability in /usr/syno/etc/mount.conf in Synology Router Manager (SRM) before 1.1.7-6941-2 allows remote authenticated users to obtain sensitive information via the world readable configuration.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Router Manager (SRM)	unspecified – < 1.1.7-6941-2	1.1.7-6941-2

References

https://www.synology.com/security/advisory/Synology_SA_18_48