CVE-2024-53286 — Synology / Synology Router Manager (SRM)

CVE-2024-53286

Synology / Synology Router Manager (SRM) PUBLISHED

Description (CNA)

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Router Manager (SRM)	affected 1.3 before 1.3.1-9346-11; unknown 0 before 1.3

CWE

CWE-78

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_16

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.