CVE-2023-41740
MEDIUMSynology Router Manager < 1.3.1-9346-6 - Path Traversal in CGI Component
Title source: llmDescription
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors.
References (1)
Core 1
Core References
Patch, Vendor Advisory vendor-advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_23_10
Scores
CVSS v3
5.3
EPSS
0.0031
EPSS Percentile
54.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
Status
published
Products (1)
synology/router_manager
< 1.3.1-9346-6
Published
Aug 31, 2023
Tracked Since
Feb 18, 2026