high7.5
CVE-2018-13285
Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands…
Impact
Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Router Manager | from 1.1 before 1.1.7-6941-1 |