Synology Router Manager
Moderate fix1 remedy
cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 1.3.1-9346-11
Synology Router Manager OS Command Injection Vulnerability in DDNS Record Functionality
Vulnerability
Patched
A command injection vulnerability has been identified in the DDNS Record feature of Synology Router Manager (SRM) versions prior to 1.3.1-9346-11. This vulnerability allows remote authenticated users with administrator privileges to execute arbitrary code. The issue arises from improper neutralization of special elements used in OS commands, creating an opportunity for exploitation through unspecified vectors.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the affected system.
Remediation
Users are advised to upgrade to Synology Router Manager version 1.3.1-9346-11 or above.
Added: Jul 23, 2025, 5:27 AM
Updated: Jul 23, 2025, 5:27 AM
Vulnerability Rating
Custom Algorithm
spread
2.6impact
10.0exploitability
4.4remediation
7.7relevance
0.3threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.