# Synology Router Manager (SRM).

Every CVE that names Synology Router Manager (SRM) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2025-29846.md)
  `CVE-2025-29846` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.2 High · Not analysed yet · Published 4 Dec 2025 · Tags: Path traversal
- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2025-29845.md)
  `CVE-2025-29845` · CVE record: Synology Synology Router Manager (SRM) · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: Path traversal
- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2025-29844.md)
  `CVE-2025-29844` · CVE record: Synology Synology Router Manager (SRM) · CVSS 4.3 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: Path traversal
- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2025-29843.md)
  `CVE-2025-29843` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.4 Medium · Not analysed yet · Published 4 Dec 2025 · Tags: Path traversal
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53288.md)
  `CVE-2024-53288` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 23 Jul 2025 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53287.md)
  `CVE-2024-53287` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 23 Jul 2025 · Tags: Cross-site scripting (XSS)
- [OS command injection in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53286.md)
  `CVE-2024-53286` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.2 High · Not analysed yet · Published 23 Jul 2025 · Tags: Command injection
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53285.md)
  `CVE-2024-53285` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53284.md)
  `CVE-2024-53284` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53283.md)
  `CVE-2024-53283` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53282.md)
  `CVE-2024-53282` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53281.md)
  `CVE-2024-53281` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53279.md)
  `CVE-2024-53279` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-53280.md)
  `CVE-2024-53280` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 9 Dec 2024 · Tags: Cross-site scripting (XSS)
- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-11398.md)
  `CVE-2024-11398` · CVE record: Synology Synology Router Manager (SRM) · CVSS 8.1 High · Not analysed yet · Published 4 Dec 2024 · Tags: Path traversal
- [Download of code without integrity check in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-39348.md)
  `CVE-2024-39348` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.5 High · Not analysed yet · Published 28 Jun 2024 · Tags: CWE-494
- [Incorrect default permissions in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2024-39347.md)
  `CVE-2024-39347` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.9 Medium · Not analysed yet · Published 28 Jun 2024 · Tags: Broken access control
- [Synology Router Manager (SRM): Exposure of sensitive information to an unauthorized actor vulnerability in cgi component…](https://agentprime.io/advisories/CVE-2023-41741.md)
  `CVE-2023-41741` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023
- [Synology Router Manager (SRM): Improper limitation of a pathname to a restricted directory ('Path Traversal')…](https://agentprime.io/advisories/CVE-2023-41740.md)
  `CVE-2023-41740` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.3 Medium · Not analysed yet · Published 31 Aug 2023
- [Synology Router Manager (SRM): Uncontrolled resource consumption vulnerability in File Functionality in Synology Router…](https://agentprime.io/advisories/CVE-2023-41739.md)
  `CVE-2023-41739` · CVE record: Synology Synology Router Manager (SRM) · CVSS 4.9 Medium · Not analysed yet · Published 31 Aug 2023
- [Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…](https://agentprime.io/advisories/CVE-2023-41738.md)
  `CVE-2023-41738` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.2 High · Not analysed yet · Published 31 Aug 2023
- [Synology DiskStation Manager (DSM): Use of insufficiently random values vulnerability in User Management Functionality in…](https://agentprime.io/advisories/CVE-2023-2729.md)
  `CVE-2023-2729` · CVE record: Synology DiskStation Manager (DSM) and 2 more · CVSS 5.9 Medium · Not analysed yet · Published 13 Jun 2023
- [Uncontrolled search path in Synology DiskStation Manager (DSM) and others](https://agentprime.io/advisories/CVE-2023-0142.md)
  `CVE-2023-0142` · CVE record: Synology DiskStation Manager (DSM) and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 13 Jun 2023 · Tags: CWE-427
- [Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…](https://agentprime.io/advisories/CVE-2023-32956.md)
  `CVE-2023-32956` · CVE record: Synology Synology Router Manager (SRM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 May 2023
- [Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…](https://agentprime.io/advisories/CVE-2023-32955.md)
  `CVE-2023-32955` · CVE record: Synology Synology Router Manager (SRM) · CVSS 8.1 High · Not analysed yet · Published 16 May 2023
- [Synology Router Manager (SRM): Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager…](https://agentprime.io/advisories/CVE-2023-0077.md)
  `CVE-2023-0077` · CVE record: Synology Synology Router Manager (SRM) · CVSS 6.5 Medium · Not analysed yet · Published 5 Jan 2023
- [Synology Router Manager (SRM): Improper neutralization of special elements in output used by a downstream component…](https://agentprime.io/advisories/CVE-2022-43932.md)
  `CVE-2022-43932` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.5 High · Not analysed yet · Published 5 Jan 2023
- [Synology Router Manager (SRM): Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a…](https://agentprime.io/advisories/CVE-2020-27658.md)
  `CVE-2020-27658` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.1 High · Not analysed yet · Published 29 Oct 2020 · Tags: CWE-1004
- [Cleartext transmission of sensitive information in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2020-27657.md)
  `CVE-2020-27657` · CVE record: Synology Synology Router Manager (SRM) · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2020 · Tags: Weak cryptography or TLS
- [Improper privilege management in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2020-27655.md)
  `CVE-2020-27655` · CVE record: Synology Synology Router Manager (SRM) · CVSS 6.5 Medium · Not analysed yet · Published 29 Oct 2020 · Tags: Privilege escalation
- [Improper privilege management in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2020-27654.md)
  `CVE-2020-27654` · CVE record: Synology Synology Router Manager (SRM) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Oct 2020 · Tags: Privilege escalation
- [Broken or risky cryptographic algorithm in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2020-27653.md)
  `CVE-2020-27653` · CVE record: Synology Synology Router Manager (SRM) · CVSS 8.3 High · Not analysed yet · Published 29 Oct 2020 · Tags: Weak cryptography or TLS
- [Synology Router Manager (SRM): Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the…](https://agentprime.io/advisories/CVE-2020-27651.md)
  `CVE-2020-27651` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.8 Medium · Not analysed yet · Published 29 Oct 2020 · Tags: CWE-614
- [Improper certificate validation in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2020-27649.md)
  `CVE-2020-27649` · CVE record: Synology Synology Router Manager (SRM) · CVSS 8.3 High · Not analysed yet · Published 29 Oct 2020 · Tags: Weak cryptography or TLS
- [Out-of-bounds read in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2019-11823.md)
  `CVE-2019-11823` · CVE record: Synology Synology Router Manager (SRM) · CVSS 8.6 High · Not analysed yet · Published 4 May 2020 · Tags: Memory corruption
- [Information disclosure in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-13292.md)
  `CVE-2018-13292` · CVE record: Synology Synology Router Manager (SRM) · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2019 · Tags: Information disclosure
- [Information disclosure in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-13290.md)
  `CVE-2018-13290` · CVE record: Synology Synology Router Manager (SRM) · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2019 · Tags: Information disclosure
- [Information disclosure in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-13289.md)
  `CVE-2018-13289` · CVE record: Synology Synology Router Manager (SRM) · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2019 · Tags: Information disclosure
- [Incorrect default permissions in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-13287.md)
  `CVE-2018-13287` · CVE record: Synology Synology Router Manager (SRM) · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2019 · Tags: Broken access control
- [OS command injection in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-13285.md)
  `CVE-2018-13285` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.5 High · Not analysed yet · Published 1 Apr 2019 · Tags: Command injection
- [Cross-site scripting in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2018-8918.md)
  `CVE-2018-8918` · CVE record: Synology Synology Router Manager (SRM) · CVSS 6.5 Medium · Not analysed yet · Published 24 Dec 2018 · Tags: Cross-site scripting (XSS)
- [Command injection in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2017-12078.md)
  `CVE-2017-12078` · CVE record: Synology Synology Router Manager (SRM) · CVSS 7.2 High · Not analysed yet · Published 8 Jun 2018 · Tags: Command injection
- [Path traversal in Synology Router Manager (SRM)](https://agentprime.io/advisories/CVE-2017-15895.md)
  `CVE-2017-15895` · CVE record: Synology Synology Router Manager (SRM) · No CVSS score · Not analysed yet · Published 8 Dec 2017 · Tags: Path traversal

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=synology-router-manager-srm>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/synology-router-manager-srm/>. Everything for agents: <https://agentprime.io/llms.txt>.