Security Advisory
CVE-2024-53286
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Improper neutralization of special elements used in an OS command (OS Command Injection) vulnerability in DDNS Record functionality in Synology Router Manager (SRM) before 1.3.1-9346-11 allows remote authenticated users with administrator privileges to execute arbitrary code via unspecified vectors.