Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
N/A
Vulnerability Title
Synology Router Manager 操作系统命令注入漏洞
Vulnerability Description
Synology Router Manager(SRM)是中国群晖科技(Synology)公司的一款用于配置和管理Synology路由器的软件。 Synology Router Manager 1.3 1.3.1-9346-6之前版本存在操作系统命令注入漏洞,该漏洞源于目录域功能中存在对操作系统命令中使用的特殊元素的不正确中和,允许经过身份验证的远程用户通过未指定的向量执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A