high7.2
CVE-2024-53286
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manage…
Impact
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Router Manager | from 1.3 before 1.3.1-9346 Version 1.3.1-9346 |