medium5.9
CVE-2024-39347
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-…
Impact
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Router Manager | from 1.2 before 1.2.5-8227 from 1.3 before 1.3.1-9346 Versions 1.2.5-8227, 1.3.1-9346 |