CVE-2023-32956

CRÍTICO 9.8CVE-2023-32956 · Published 16/05/2023 · updated 17/06/2026

En resumen

CVE-2023-32956 es una vulnerabilidad CRÍTICO (CVSS 9.8) que afecta a router manager (synology).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.5%, mayor que el 74.8% de las vulnerabilidades.
Solución: actualizar a 1.2.5-8227-6, 1.3.1-9346-3 o posterior.

Package	Affected versions	Patched versions
router manager synology	`≥ 1.2, < 1.2.5-8227-6≥ 1.3, < 1.3.1-9346-3`	`1.2.5-8227-61.3.1-9346-3`

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors.

References

synology.com/en-global/security/advisory/Synology_SA_22_25 · Vendor Advisory

Más vulnerabilidades de router manager

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

router manager

synology

≥ 1.2, < 1.2.5-8227-6≥ 1.3, < 1.3.1-9346-3

1.2.5-8227-61.3.1-9346-3

Más vulnerabilidades de router manager

Ver todo →