Vulnerability-Lookup

CVE-2023-0142 (GCVE-0-2023-0142)

Vulnerability from cvelistv5 – Published: 2023-06-13 06:52 – Updated: 2025-01-03 01:55

Summary

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-01-03 01:54 UTC

CWE

CWE-427 - Uncontrolled Search Path Element

Assigner

synology mitre root Scorecard

References

2 references

URL	Tags
https://www.synology.com/en-global/security/advis…	vendor-advisory
https://www.synology.com/en-global/security/advis…	vendor-advisory

Impacted products

3 products

Vendor	Product	Version	CPE status
Synology	DiskStation Manager (DSM)	Unaffected: 7.2 , < 7.2.* (semver) Affected: 7.1 , < 7.1-42661 (semver) Affected: 7.0 , < 7.0.1-42218-7 (semver) Affected: 6.2 , < 6.2.4-25556-8 (semver) Unknown: 0 , < 6.2 (semver)	guessed
Synology	Unified Controller (DSMUC)	Affected: 3.1 , < 3.1.* (semver) Unknown: 0 , < 3.1 (semver)	guessed
Synology	Synology Router Manager (SRM)	Affected: 1.3 , < 1.3.* (semver) Affected: 1.2 , < 1.2.* (semver) Unknown: 0 , < 1.2 (semver)	guessed

Credits

Chanyoung So

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T05:02:43.739Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "Synology-SA-23:05 DSM",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
          },
          {
            "name": "Synology-SA-23:06 SRM",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-0142",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-03T01:54:30.653163Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-03T01:55:23.191Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "DiskStation Manager (DSM)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "7.2.*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "semver"
            },
            {
              "lessThan": "7.1-42661",
              "status": "affected",
              "version": "7.1",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.1-42218-7",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.4-25556-8",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Unified Controller (DSMUC)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "3.1.*",
              "status": "affected",
              "version": "3.1",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Synology Router Manager (SRM)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "1.3.*",
              "status": "affected",
              "version": "1.3",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2.*",
              "status": "affected",
              "version": "1.2",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Chanyoung So"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "Uncontrolled Search Path Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2024-12-03T07:12:44.154Z",
        "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
        "shortName": "synology"
      },
      "references": [
        {
          "name": "Synology-SA-23:05 DSM",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
        },
        {
          "name": "Synology-SA-23:06 SRM",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
    "assignerShortName": "synology",
    "cveId": "CVE-2023-0142",
    "datePublished": "2023-06-13T06:52:50.745Z",
    "dateReserved": "2023-01-10T02:14:16.029Z",
    "dateUpdated": "2025-01-03T01:55:23.191Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-0142",
      "date": "2026-09-30",
      "epss": "0.0097",
      "percentile": "0.60463"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "affected",
                "product": "DiskStation Manager (DSM)",
                "vendor": "Synology",
                "versions": [
                  {
                    "lessThan": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "7.1-42661",
                    "status": "affected",
                    "version": "7.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "7.0.1-42218-7",
                    "status": "affected",
                    "version": "7.0",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.2.4-25556-8",
                    "status": "affected",
                    "version": "6.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.2",
                    "status": "unknown",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Unified Controller (DSMUC)",
                "vendor": "Synology",
                "versions": [
                  {
                    "lessThan": "3.1.*",
                    "status": "affected",
                    "version": "3.1",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "3.1",
                    "status": "unknown",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Synology Router Manager (SRM)",
                "vendor": "Synology",
                "versions": [
                  {
                    "lessThan": "1.3.*",
                    "status": "affected",
                    "version": "1.3",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "1.2.*",
                    "status": "affected",
                    "version": "1.2",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "1.2",
                    "status": "unknown",
                    "version": "0",
                    "versionType": "semver"
                  }
                ]
              }
            ],
            "source": "security@synology.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1C199245-E7B1-496C-9977-F422B0F7DB08",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "854F24F1-A574-42D7-9E0C-D7ADEE709BB3",
                    "versionEndExcluding": "1.3.1-9346",
                    "versionStartIncluding": "1.2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E058E40E-821B-4B8D-93E9-30085D221E24",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_1:*:*:*:*:*:*",
                    "matchCriteriaId": "737E9ABF-DBD4-4741-B7EB-8F5758579C09",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_2:*:*:*:*:*:*",
                    "matchCriteriaId": "3D41BFA2-459B-4C48-A1BE-02D8753975E2",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_3:*:*:*:*:*:*",
                    "matchCriteriaId": "3610F308-E287-4513-98AF-0A581C7A105A",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_4:*:*:*:*:*:*",
                    "matchCriteriaId": "D795CCC1-6D45-4061-AB9A-AA2DDEFA1A33",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_5:*:*:*:*:*:*",
                    "matchCriteriaId": "30D4238D-DC76-48A6-87C7-7A1043075281",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "1842D193-6603-44F2-A256-504238578154",
                    "versionEndExcluding": "7.1-42661",
                    "versionStartIncluding": "6.2",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors."
          },
          {
            "lang": "es",
            "value": "La vulnerabilidad del elemento de ruta de b\u00fasqueda no controlada en la funcionalidad de administraci\u00f3n de copias de seguridad en Synology DiskStation Manager (DSM) anterior a 6.2.4-25556-8, 7.0.1-42218-7 y 7.1-42661 permite que usuarios remotos autenticados con privilegios de administrador lean o escriban archivos arbitrarios a trav\u00e9s de vectores no especificados."
          }
        ],
        "id": "CVE-2023-0142",
        "lastModified": "2026-06-17T05:24:52.877",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 1.2,
              "impactScore": 5.2,
              "source": "security@synology.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 8.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "exploitabilityScore": 2.8,
              "impactScore": 5.2,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-0142",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-03T01:54:30.653163Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-06-13T07:15:46.203",
        "references": [
          {
            "source": "security@synology.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
          },
          {
            "source": "security@synology.com",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
          }
        ],
        "sourceIdentifier": "security@synology.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-427"
              }
            ],
            "source": "security@synology.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-28T23:46:41+00:00",
      "cve": "CVE-2023-0142",
      "id": "CVE-2023-0142",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2023-0142",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-0142.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T05:02:43.739Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "Synology-SA-23:05 DSM",
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
              },
              {
                "name": "Synology-SA-23:06 SRM",
                "tags": [
                  "vendor-advisory",
                  "x_transferred"
                ],
                "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-0142",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-01-03T01:54:30.653163Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-01-03T01:55:18.795Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "affected",
              "product": "DiskStation Manager (DSM)",
              "vendor": "Synology",
              "versions": [
                {
                  "lessThan": "7.2.*",
                  "status": "unaffected",
                  "version": "7.2",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.1-42661",
                  "status": "affected",
                  "version": "7.1",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.0.1-42218-7",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.2.4-25556-8",
                  "status": "affected",
                  "version": "6.2",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.2",
                  "status": "unknown",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Unified Controller (DSMUC)",
              "vendor": "Synology",
              "versions": [
                {
                  "lessThan": "3.1.*",
                  "status": "affected",
                  "version": "3.1",
                  "versionType": "semver"
                },
                {
                  "lessThan": "3.1",
                  "status": "unknown",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            },
            {
              "defaultStatus": "affected",
              "product": "Synology Router Manager (SRM)",
              "vendor": "Synology",
              "versions": [
                {
                  "lessThan": "1.3.*",
                  "status": "affected",
                  "version": "1.3",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2.*",
                  "status": "affected",
                  "version": "1.2",
                  "versionType": "semver"
                },
                {
                  "lessThan": "1.2",
                  "status": "unknown",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "finder",
              "value": "Chanyoung So"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "NONE",
                "baseScore": 6.5,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-427",
                  "description": "Uncontrolled Search Path Element",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2024-12-03T07:12:44.154Z",
            "orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
            "shortName": "synology"
          },
          "references": [
            {
              "name": "Synology-SA-23:05 DSM",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
            },
            {
              "name": "Synology-SA-23:06 SRM",
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01",
        "assignerShortName": "synology",
        "cveId": "CVE-2023-0142",
        "datePublished": "2023-06-13T06:52:50.745Z",
        "dateReserved": "2023-01-10T02:14:16.029Z",
        "dateUpdated": "2025-01-03T01:55:23.191Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CERTFR-2023-AVI-0475

Vulnerability from certfr_avis - Published: 2023-06-19 - Updated: 2023-06-19

De multiples vulnérabilités ont été découvertes dans Synology DiskStation Manager. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et une atteinte à l'intégrité des données.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Synology	DSM	Synology DiskStation Manager (DSM) versions 7.2-x antérieures à 7.2-64561
	Synology	DSM	Synology DiskStation Manager (DSM) versions 7.1-x antérieures à 7.1-42661

References

Title

Publication Time

CERTFR-2024-AVI-0003

Vulnerability from certfr_avis - Published: 2024-01-04 - Updated: 2024-01-04

Une vulnérabilité a été découverte dans les produits Synology. Elle permet à un attaquant authentifié de provoquer une atteinte à la confidentialité des données.

Synology ne propose pas de correctif pour la version 1.2 de Synology Router Manager. L'éditeur précise qu'un correctif sera publié ultérieurement pour la version 1.3.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

	Vendor	Product	Description
	Synology	SRM	Synology Synology Router Manager (SRM) version 1.2
	Synology	SRM	Synology Synology Router Manager (SRM) version 1.3

References

Title

Publication Time

FKIE_CVE-2023-0142

Vulnerability from fkie_nvd - Published: 2023-06-13 07:15 - Updated: 2026-06-17 05:24

Severity

6.5 (Medium) - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
8.1 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Summary

References

URL	Tags
security@synology.com	https://www.synology.com/en-global/security/advisory/Synology_SA_23_05	Vendor Advisory
security@synology.com	https://www.synology.com/en-global/security/advisory/Synology_SA_23_06	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.synology.com/en-global/security/advisory/Synology_SA_23_05	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.synology.com/en-global/security/advisory/Synology_SA_23_06	Vendor Advisory

Impacted products

Vendor	Product	Version
synology	diskstation_manager_unified_controller	3.1
synology	router_manager	*
synology	router_manager	1.3.1-9346
synology	router_manager	1.3.1-9346
synology	router_manager	1.3.1-9346
synology	router_manager	1.3.1-9346
synology	router_manager	1.3.1-9346
synology	router_manager	1.3.1-9346
synology	diskstation_manager	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "affected",
          "product": "DiskStation Manager (DSM)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "7.2.*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "semver"
            },
            {
              "lessThan": "7.1-42661",
              "status": "affected",
              "version": "7.1",
              "versionType": "semver"
            },
            {
              "lessThan": "7.0.1-42218-7",
              "status": "affected",
              "version": "7.0",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2.4-25556-8",
              "status": "affected",
              "version": "6.2",
              "versionType": "semver"
            },
            {
              "lessThan": "6.2",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Unified Controller (DSMUC)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "3.1.*",
              "status": "affected",
              "version": "3.1",
              "versionType": "semver"
            },
            {
              "lessThan": "3.1",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Synology Router Manager (SRM)",
          "vendor": "Synology",
          "versions": [
            {
              "lessThan": "1.3.*",
              "status": "affected",
              "version": "1.3",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2.*",
              "status": "affected",
              "version": "1.2",
              "versionType": "semver"
            },
            {
              "lessThan": "1.2",
              "status": "unknown",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "security@synology.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "1C199245-E7B1-496C-9977-F422B0F7DB08",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "854F24F1-A574-42D7-9E0C-D7ADEE709BB3",
              "versionEndExcluding": "1.3.1-9346",
              "versionStartIncluding": "1.2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:*:*:*:*:*:*:*",
              "matchCriteriaId": "E058E40E-821B-4B8D-93E9-30085D221E24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_1:*:*:*:*:*:*",
              "matchCriteriaId": "737E9ABF-DBD4-4741-B7EB-8F5758579C09",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_2:*:*:*:*:*:*",
              "matchCriteriaId": "3D41BFA2-459B-4C48-A1BE-02D8753975E2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_3:*:*:*:*:*:*",
              "matchCriteriaId": "3610F308-E287-4513-98AF-0A581C7A105A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_4:*:*:*:*:*:*",
              "matchCriteriaId": "D795CCC1-6D45-4061-AB9A-AA2DDEFA1A33",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_5:*:*:*:*:*:*",
              "matchCriteriaId": "30D4238D-DC76-48A6-87C7-7A1043075281",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1842D193-6603-44F2-A256-504238578154",
              "versionEndExcluding": "7.1-42661",
              "versionStartIncluding": "6.2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad del elemento de ruta de b\u00fasqueda no controlada en la funcionalidad de administraci\u00f3n de copias de seguridad en Synology DiskStation Manager (DSM) anterior a 6.2.4-25556-8, 7.0.1-42218-7 y 7.1-42661 permite que usuarios remotos autenticados con privilegios de administrador lean o escriban archivos arbitrarios a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2023-0142",
  "lastModified": "2026-06-17T05:24:52.877",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.5,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 5.2,
        "source": "security@synology.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 5.2,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-0142",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-01-03T01:54:30.653163Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2023-06-13T07:15:46.203",
  "references": [
    {
      "source": "security@synology.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
    },
    {
      "source": "security@synology.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
    }
  ],
  "sourceIdentifier": "security@synology.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-427"
        }
      ],
      "source": "security@synology.com",
      "type": "Secondary"
    }
  ]
}

GHSA-8F24-4FHW-XQCC

Vulnerability from github – Published: 2023-06-13 09:30 – Updated: 2024-04-04 04:45

Details

Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors.

Severity

6.5 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-0142"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-427"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-06-13T07:15:46Z",
    "severity": "HIGH"
  },
  "details": "Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors.",
  "id": "GHSA-8f24-4fhw-xqcc",
  "modified": "2024-04-04T04:45:09Z",
  "published": "2023-06-13T09:30:19Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0142"
    },
    {
      "type": "WEB",
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
    },
    {
      "type": "WEB",
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2023-0142

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2023-0142

Aliases

CVE-2023-0142

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-0142",
    "id": "GSD-2023-0142"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-0142"
      ],
      "details": "Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors.",
      "id": "GSD-2023-0142",
      "modified": "2023-12-13T01:20:22.331417Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "security@synology.com",
        "ID": "CVE-2023-0142",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "DiskStation Manager (DSM)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "7.2.*",
                                "status": "unaffected",
                                "version": "7.2",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "7.1-42661",
                                "status": "affected",
                                "version": "7.1",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "7.0.*",
                                "status": "affected",
                                "version": "7.0",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "6.2.*",
                                "status": "affected",
                                "version": "6.2",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "6.2",
                                "status": "unknown",
                                "version": "0",
                                "versionType": "semver"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Unified Controller (DSMUC)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "3.1.*",
                                "status": "affected",
                                "version": "3.1",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "3.1",
                                "status": "unknown",
                                "version": "0",
                                "versionType": "semver"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Synology Router Manager (SRM)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "not down converted",
                          "x_cve_json_5_version_data": {
                            "defaultStatus": "affected",
                            "versions": [
                              {
                                "lessThan": "1.3.*",
                                "status": "affected",
                                "version": "1.3",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "1.2.*",
                                "status": "affected",
                                "version": "1.2",
                                "versionType": "semver"
                              },
                              {
                                "lessThan": "1.2",
                                "status": "unknown",
                                "version": "0",
                                "versionType": "semver"
                              }
                            ]
                          }
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Synology"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Chanyoung So"
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-427: Uncontrolled Search Path Element"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05",
            "refsource": "MISC",
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
          },
          {
            "name": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06",
            "refsource": "MISC",
            "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "7.1-42661",
                "versionStartIncluding": "6.2",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_1:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_2:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_3:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_4:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:update_5:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:1.3.1-9346:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.3.1-9346",
                "versionStartIncluding": "1.2",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "security@synology.com",
          "ID": "CVE-2023-0142"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-427"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_05"
            },
            {
              "name": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_06"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "exploitabilityScore": 2.8,
          "impactScore": 5.2
        }
      },
      "lastModifiedDate": "2023-06-21T16:59Z",
      "publishedDate": "2023-06-13T07:15Z"
    }
  }
}

WID-SEC-W-2023-1426

Vulnerability from csaf_certbund - Published: 2023-06-12 22:00 - Updated: 2023-06-18 22:00

Summary

Synology Router Manager: Mehrere Schwachstellen

Severity

Mittel

Scope

2 vulnerabilities in this advisory, including CVE-2023-0142.

CVE-2023-0142

Es existiert eine Schwachstelle in Synology Router Manager. Ein authentisierter Angreifer kann diese, nicht näher beschriebene Schwachstelle ausnutzen, um beliebige Dateien zu lesen oder zu schreiben.

Known affected: 2 products

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-0142 (GCVE-0-2023-0142)

CERTFR-2023-AVI-0475

Solution

CERTFR-2024-AVI-0003

Solution

FKIE_CVE-2023-0142

GHSA-8F24-4FHW-XQCC

GSD-2023-0142

WID-SEC-W-2023-1426

Tags

Sightings

Nomenclature

Related by attack behaviour