Security Advisory

CVE-2024-53286

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-07-23 04:11:30
Last updated 2025-07-23 15:14:26
Assigner synology
State PUBLISHED

Description

Improper neutralization of special elements used in an OS command (OS Command Injection) vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors.