CVE-2023-32956: OS Command Injection
Published May 16, 2023
·Updated
Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected Software
2 affected components
Synology Router Manager>=1.2<1.2.5-8227-6
Synology Router Manager>=1.3<1.3.1-9346-3
Event History
May 16, 2023
CVE Published
via MITRE·07:16 AM
Data Sourced
via MITRE·07:16 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2023-32956.
2
What is the title of this vulnerability?
The title of this vulnerability is Improper neutralization of special elements used in an OS command (OS Command Injection) vulnerability.
3
What is the severity of CVE-2023-32956?
The severity of CVE-2023-32956 is critical.
4
What software is affected by CVE-2023-32956?
The Synology Router Manager (SRM) versions before 1.2.5-8227-6 and 1.3.1-9346-3 are affected by CVE-2023-32956.
5
How can remote attackers exploit CVE-2023-32956?
Remote attackers can exploit CVE-2023-32956 to execute arbitrary code via unspecified vectors.