CVE-2022-43932

ALTO 7.5CVE-2022-43932 · Published 05/01/2023 · updated 17/06/2026

En resumen

CVE-2022-43932 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a router manager (synology).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.0%, mayor que el 63.6% de las vulnerabilidades.
Solución: actualizar a 1.2.5-8227-6, 1.3.1-9346-3 o posterior.

Package	Affected versions	Patched versions
router manager synology	`≥ 1.2, < 1.2.5-8227-6≥ 1.3, < 1.3.1-9346-3`	`1.2.5-8227-61.3.1-9346-3`

Description

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors.

References

synology.com/en-global/security/advisory/Synology_SA_22_25 · Vendor Advisory

Más vulnerabilidades de router manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

router manager

synology

≥ 1.2, < 1.2.5-8227-6≥ 1.3, < 1.3.1-9346-3

1.2.5-8227-61.3.1-9346-3

Más vulnerabilidades de router manager

Ver todo →