5.9

CVE-2024-39347

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synology ≫ Router Manager Version >= 1.2 < 1.2.5-8227
Synology ≫ Router Manager Version >= 1.3 < 1.3.1-9346
Synology ≫ Router Manager Version1.2.5-8227 Update-
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate1
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate10
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate2
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate3
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate4
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate5
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate6
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate7
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate8
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate9
Synology ≫ Router Manager Version1.3.1-9346 Update-
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate1
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate2
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate3
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate4
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate5
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate6
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.594
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@synology.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.