Security Advisory

CVE-2023-32955

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-05-16 07:15:16

Last updated 2025-01-22 21:14:13

Assigner synology

CVSS score 8.1

State PUBLISHED

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows man-in-the-middle attackers to execute arbitrary commands via unspecified vectors.

← Browse all CVEs View on cve.org ↗