CVE-2024-53281

Summary

CVE-2024-53281 is a Cross-Site Scripting (XSS) vulnerability affecting the Network Wake-on-LAN (WOL) functionality in Synology Router Manager (SRM) prior to version 1.3.1-9346-10. This issue permits authenticated attackers to inject arbitrary web scripts or HTML into web pages, potentially stealing sensitive data or gaining unauthorized access to user sessions. The vulnerability arises from improper neutralization of user inputs during web page generation. Users are advised to update their SRM software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.