Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)

guest · Oct 29, 2020

Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)
October 29, 2020
https://blog.talosintelligence.com/2020/10/vulnerability-spotlight-multiple.html

Cisco Talos recently discovered multiple remote vulnerabilities in software that helps power Synology routers. The bugs exist in Synology Router Manager (SRM) — a Linux-based operating system for Synology routers — and QuickConnect, a feature inside SRM that allows users to remotely connect to their routers.

An adversary could use these vulnerabilities to carry out a range of malicious actions, including executing remote code on the device, the exposure of sensitive information regarding the victim’s network and communication with other devices connected to the same network.
Click to expand...

While this post focuses on SRM which we did the research on, Synology has informed us that DSM was affected too [...]
Paths to root around the world
We discovered multiple vulnerabilities that allow us to achieve unconstrained root privileges in the router. Additionally, we found that it was possible to remotely communicate with any router that was using the QuickConnect feature, and escalate our privileges to root.[...]
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)

guest Guest

Log in or Sign up

Vulnerability Spotlight: Multiple vulnerabilities in Synology SRM (Synology Router Manager)

guest Guest

Useful Searches