CVE-2023-41741
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk48th percentile - higher than 48% of all known CVEs
Summary
CVE-2023-41741 describes a vulnerability that exposes sensitive information to unauthorized actors in the cgi component of Synology Router Manager (SRM) before version 1.3.1-9346-6. Remote attackers can obtain sensitive information via unspecified vectors.
Risk Assessment
The exposure of sensitive information may lead to privacy breaches and increased risk of attacks on the system. Organizations could face financial and reputational losses.
Recommendation
It is recommended to update Synology Router Manager to the latest version to mitigate this vulnerability. A security audit should also be conducted to identify potential threats.
Original NVD description (English source)
Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to obtain sensitive information via unspecified vectors.