Advisories · Technology

Synology Router Manager (SRM).

Every CVE that names Synology Router Manager (SRM) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-29846 CVE record

CVSS 7.2 High

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 4 Dec 2025
CVE-2025-29845 CVE record

CVSS 4.3 Medium

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 4 Dec 2025
CVE-2025-29844 CVE record

CVSS 4.3 Medium

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 4 Dec 2025
CVE-2025-29843 CVE record

CVSS 5.4 Medium

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 4 Dec 2025
CVE-2024-53288 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2025
CVE-2024-53287 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 23 Jul 2025
CVE-2024-53286 CVE record

CVSS 7.2 High

OS command injection in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Command injection
Not analysed yet 23 Jul 2025
CVE-2024-53285 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53284 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53283 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53282 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53281 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53279 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-53280 CVE record

CVSS 5.9 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2024
CVE-2024-11398 CVE record

CVSS 8.1 High

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 4 Dec 2024
CVE-2024-39348 CVE record

CVSS 7.5 High

Download of code without integrity check in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- CWE-494
Not analysed yet 28 Jun 2024
CVE-2024-39347 CVE record

CVSS 5.9 Medium

Incorrect default permissions in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Broken access control
Not analysed yet 28 Jun 2024
CVE-2023-41741 CVE record

CVSS 5.3 Medium

Synology Router Manager (SRM): Exposure of sensitive information to an unauthorized actor vulnerability in cgi component…
- Synology Router Manager (SRM)
Not analysed yet 31 Aug 2023
CVE-2023-41740 CVE record

CVSS 5.3 Medium

Synology Router Manager (SRM): Improper limitation of a pathname to a restricted directory ('Path Traversal')…
- Synology Router Manager (SRM)
Not analysed yet 31 Aug 2023
CVE-2023-41739 CVE record

CVSS 4.9 Medium

Synology Router Manager (SRM): Uncontrolled resource consumption vulnerability in File Functionality in Synology Router…
- Synology Router Manager (SRM)
Not analysed yet 31 Aug 2023
CVE-2023-41738 CVE record

CVSS 7.2 High

Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…
- Synology Router Manager (SRM)
Not analysed yet 31 Aug 2023
CVE-2023-2729 CVE record

CVSS 5.9 Medium

Synology DiskStation Manager (DSM): Use of insufficiently random values vulnerability in User Management Functionality in…
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
Not analysed yet 13 Jun 2023
CVE-2023-0142 CVE record

CVSS 6.5 Medium

Uncontrolled search path in Synology DiskStation Manager (DSM) and others
- Synology DiskStation Manager (DSM)
- Synology Unified Controller (DSMUC)
- CWE-427
Not analysed yet 13 Jun 2023
CVE-2023-32956 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…
- Synology Router Manager (SRM)
Not analysed yet 16 May 2023
CVE-2023-32955 CVE record

CVSS 8.1 High

Synology Router Manager (SRM): Improper neutralization of special elements used in an OS command ('OS Command…
- Synology Router Manager (SRM)
Not analysed yet 16 May 2023
CVE-2023-0077 CVE record

CVSS 6.5 Medium

Synology Router Manager (SRM): Integer overflow or wraparound vulnerability in CGI component in Synology Router Manager…
- Synology Router Manager (SRM)
Not analysed yet 5 Jan 2023
CVE-2022-43932 CVE record

CVSS 7.5 High

Synology Router Manager (SRM): Improper neutralization of special elements in output used by a downstream component…
- Synology Router Manager (SRM)
Not analysed yet 5 Jan 2023
CVE-2020-27658 CVE record

CVSS 7.1 High

Synology Router Manager (SRM): Synology Router Manager (SRM) before 1.2.4-8081 does not include the HTTPOnly flag in a…
- Synology Router Manager (SRM)
- CWE-1004
Not analysed yet 29 Oct 2020
CVE-2020-27657 CVE record

CVSS 6.5 Medium

Cleartext transmission of sensitive information in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2020-27655 CVE record

CVSS 6.5 Medium

Improper privilege management in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Privilege escalation
Not analysed yet 29 Oct 2020
CVE-2020-27654 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Improper privilege management in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Privilege escalation
Not analysed yet 29 Oct 2020
CVE-2020-27653 CVE record

CVSS 8.3 High

Broken or risky cryptographic algorithm in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2020-27651 CVE record

CVSS 5.8 Medium

Synology Router Manager (SRM): Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the…
- Synology Router Manager (SRM)
- CWE-614
Not analysed yet 29 Oct 2020
CVE-2020-27649 CVE record

CVSS 8.3 High

Improper certificate validation in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Weak cryptography or TLS
Not analysed yet 29 Oct 2020
CVE-2019-11823 CVE record

CVSS 8.6 High

Out-of-bounds read in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Memory corruption
Not analysed yet 4 May 2020
CVE-2018-13292 CVE record

CVSS 4.3 Medium

Information disclosure in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Information disclosure
Not analysed yet 1 Apr 2019
CVE-2018-13290 CVE record

CVSS 4.3 Medium

Information disclosure in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Information disclosure
Not analysed yet 1 Apr 2019
CVE-2018-13289 CVE record

CVSS 5.3 Medium

Information disclosure in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Information disclosure
Not analysed yet 1 Apr 2019
CVE-2018-13287 CVE record

CVSS 6.5 Medium

Incorrect default permissions in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Broken access control
Not analysed yet 1 Apr 2019
CVE-2018-13285 CVE record

CVSS 7.5 High

OS command injection in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Command injection
Not analysed yet 1 Apr 2019
CVE-2018-8918 CVE record

CVSS 6.5 Medium

Cross-site scripting in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Cross-site scripting (XSS)
Not analysed yet 24 Dec 2018
CVE-2017-12078 CVE record

CVSS 7.2 High

Command injection in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Command injection
Not analysed yet 8 Jun 2018
CVE-2017-15895 CVE record

Path traversal in Synology Router Manager (SRM)
- Synology Router Manager (SRM)
- Path traversal
Not analysed yet 8 Dec 2017