CVE-2017-12078: Command Injection
Published Jun 8, 2018
·Updated
Command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter.
Affected Software
1 affected component
Synology Router Manager<1.1.6-6931
Event History
Jun 8, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2017-12078?
CVE-2017-12078 is a command injection vulnerability in EZ-Internet in Synology Router Manager (SRM) before version 1.1.6-6931.
2
How does CVE-2017-12078 impact users?
CVE-2017-12078 allows remote authenticated users to execute arbitrary commands on the affected system.
3
What is the severity of CVE-2017-12078?
CVE-2017-12078 has a severity rating of high, with a CVSS score of 7.2.
4
How can I fix CVE-2017-12078?
To fix CVE-2017-12078, users should update Synology Router Manager to version 1.1.6-6931 or later.
5
Where can I find more information about CVE-2017-12078?
More information about CVE-2017-12078 can be found at the following link: https://www.synology.com/en-global/support/security/Synology_SA_17_79