CVE-2023-41740

Summary

CVE-2023-41740 is a path traversal vulnerability affecting the cgi component in Synology Router Manager (SRM) prior to version 1.3.1-9346-6. This issue permits remote attackers to access specific files by improperly limiting the pathname to a restricted directory. The precise vectors of attack are yet to be determined. Successful exploitation could lead to the disclosure of sensitive information. It is strongly advised that users update their Synology Router Manager software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.