CVE-2017-15895: Synology Router Manager

Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager (SRM) before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the dest_folder_path parameter.

Affected products

• Synology Router Manager: before 1.1.5-6542-4 (fixed in 1.1.5-6542-4)

Published 2017-12-08. Last modified 2026-06-17.