7.5

CVE-2024-39348

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Synology ≫ Router Manager Version >= 1.2 < 1.2.5-8227
Synology ≫ Router Manager Version >= 1.3 < 1.3.1-9346
Synology ≫ Router Manager Version1.2.5-8227 Update-
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate1
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate10
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate2
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate3
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate4
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate5
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate6
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate7
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate8
Synology ≫ Router Manager Version1.2.5-8227 Updateupdate9
Synology ≫ Router Manager Version1.3.1-9346 Update-
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate1
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate2
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate3
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate4
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate5
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate6
Synology ≫ Router Manager Version1.3.1-9346 Updateupdate7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.644
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
security@synology.com 7.5 1.6 5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE-494 Download of Code Without Integrity Check

The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.