Known vulnerabilities in Synology SRM
Vendor:
Synology Inc.
Software:
Synology SRM
Software CPE:
cpe:2.3:o:synology:synology_router_manager:*:*:*:*:*:*:*:*
Website:
https://www.synology.com/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
1.3.2-9366-2
1.3.2-9366-1
1.3.2-9366
1.3.1-9346-14
1.3.1-9346-12
1.3.1-9346-11
1.3.1-9346-10
1.3.1-9346-9
1.3.1-9346-8
1.3.1-9346-7
1.3.1-9346-6
1.3.1-9346-5
1.3.1-9346-4
1.3.1-9346-3
1.3.1-9346-2
1.3.1-9346-1
1.3.1-9346
1.3-9193-1
1.3-9193
1.2.5-8227-11
1.2.5-8227-10
1.2.5-8227-9
1.2.5-8227-8
1.2.5-8227-7
1.2.5-8227-6
1.2.5-8227-5
1.2.5-8227-4
1.2.5-8227-3
1.2.5-8227-2
1.2.5-8227-1
1.2.5-8227
1.2.5-8225
1.2.4-8081-2
1.2.4-8081-1
1.2.4-8081
1.2.3-8017-5
1.2.3-8017-4
1.2.3-8017-3
1.2.3-8017-1
1.2.3-8017
1.2.2-7915
1.2.1-7779-1
1.2.1-7779
1.2-7742-5
1.2-7742-4
1.2-7742-3
1.2-7742-2
1.2-7742-1
1.2-7742
1.1.7-6941-4
1.1.7-6941-3
1.1.7-6941-1
1.1.7-6941
1.1.6-6931-3
1.1.6-6931-2
1.1.6-6931-1
1.1.6-6931
1.1.5-6542-4
1.1.5-6542-3
1.1.5-6542-2
1.1.5-6542-1
1.1.5-6542
1.1.4-6509-4
1.1.4-6509-3
1.1.4-6509-2
1.1.4-6509-1
1.1.4-6509
1.1.3-6447-4
1.1.3-6447-3
1.1.3-6447-2
1.1.3-6447-1
1.1.3-6447
1.1.2-6425-3
1.1.2-6425-2
1.1.2-6425-1
1.1.2-6425
1.1.1-6414-1
1.1.1-6414
1.1-6338-2
1.1-6338-1
1.1-6338
1.0.3-6030-3
1.0.3-6030-2
1.0.3-6030-1
1.0.3-6030
1.0.2-6022-1
1.0.2-6022
1.0.1-6007-2
1.0.1-6007-1
1.0.1-6007
1.0-5781-3
1.0-5781-2
1.0-5781-1
1.0-5781
1.3.1-9346-13
1.2.3-8017-2
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105926 - Permissions, Privileges, and Access Controls CVE-2025-29846 |
CWE-264 | Low | 1.3.1-9346-13 | 21.03.2025 |
SB2025032115 |
||
| #VU105924 - Exposure of sensitive information to an unauthorized actor CVE-2025-29845 |
CWE-200 | Low | 1.3.1-9346-13 | 21.03.2025 |
SB2025032115 |
||
| #VU105923 - Exposure of sensitive information to an unauthorized actor CVE-2025-29844 |
CWE-200 | Low | 1.3.1-9346-13 | 21.03.2025 |
SB2025032115 |
||
| #VU105922 - Improper input validation CVE-2025-29843 |
CWE-20 | Medium | 1.3.1-9346-13 | 21.03.2025 |
SB2025032115 |
||
| #VU27678 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-11823 |
CWE-93 | Low | 1.2.3-8017-2 | 11.05.2020 |
SB2020051134 |