CVE-2024-53282

Summary

CVE-2024-53282 is a Cross-site Scripting (XSS) vulnerability affecting Synology Router Manager (SRM) before version 1.3.1-9346-10. With administrator privileges, remote authenticated users can exploit this weakness found in the MAC Filter functionality of WiFi Connect. Successful exploitation allows the malicious injection of arbitrary web scripts or HTML code, posing a significant security risk to affected systems. This issue should be addressed promptly by upgrading to the latest SRM version to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.