CVE-2023-41740: Synology Router Manager

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors.

Affected products

• Synology Router Manager: before 1.3.1-9346-6 (fixed in 1.3.1-9346-6)

Published 2023-08-31. Last modified 2026-06-17.