5.9

CVE-2024-39347

Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors.

Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users.
Data is provided by the National Vulnerability Database (NVD)
Synology ≫ Router Manager Version >= 1.2 < 1.2.5-8227
Synology ≫ Router Manager Version >= 1.3 < 1.3.1-9346
Synology ≫ Router Manager Version1.2.5-8227 Update-
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate1
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate10
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate2
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate3
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate4
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate5
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate6
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate7
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate8
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate9
Synology ≫ Router Manager Version1.3.1-9346 Update-
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate1
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate2
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate3
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate4
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate5
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate6
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.29% 0.518
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
security@synology.com 5.9 2.2 3.6
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.