Medium · 6.5 CVE-2020-27655 EUVD-2020-20162GHSA-wpm2-8qvv-w4q9

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resou…

Published Oct 29, 2020 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Router Manager (SRM)

Description

Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via inbound QuickConnect traffic.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Router Manager (SRM)	unspecified – < 1.2.4-8081	1.2.4-8081

References

https://www.synology.com/security/advisory/Synology_SA_20_14
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1066