CVE Catalog

CVE-2023-41739

MediumCVSS 4.9
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.74%

50th percentile - higher than 50% of all known CVEs

Summary

CVE-2023-41739 in Synology Router Manager (SRM) before version 1.3.1-9346-6 has an uncontrolled resource consumption vulnerability that can be exploited by remote authenticated users to conduct denial-of-service attacks.

Risk Assessment

An attacker could exploit this vulnerability to disrupt the router's operation, potentially leading to service availability interruptions within the organization.

Recommendation

It is recommended to update Synology Router Manager to version 1.3.1-9346-6 or later to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to conduct denial-of-service attacks via unspecified vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS