GCVE - cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Synology (`65464e9b-7339-559d-9719-837f074e0220`)
Product	Router Manager (`0abc53bc-fbdb-5072-9a27-ab0c4a782c0a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-39348`	vulnerable	2026-06-08 06:41:49.135421	Details available HIGH (7.5) Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors. Published: 2024-06-28T06:30:57.973Z Updated: 2024-08-02T04:26:14.241Z Open on db.gcve.eu Reference links https://www.synology.com/en-global/security/advisory/Synology_SA_23_16	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27614`	not_vulnerable	2026-06-08 05:42:42.480407	Details available MEDIUM (5.3) Exposure of sensitive information to an unauthorized actor vulnerability in web server in Synology Media Server before 1.8.1-2876 allows remote attackers to obtain sensitive information via unspecified vectors. Published: 2022-07-28T06:55:12.139Z Updated: 2024-09-17T03:48:14.077Z Open on db.gcve.eu Reference links https://www.synology.com/security/advisory/Synology_SA_20_24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22683`	not_vulnerable	2026-06-08 05:40:54.892981	Details available CRITICAL (10) Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors. Published: 2022-07-28T07:00:13.884Z Updated: 2024-09-16T22:41:30.330Z Open on db.gcve.eu Reference links https://www.synology.com/security/advisory/Synology_SA_20_24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9502`	vulnerable	2026-06-08 05:14:25.397917	Broadcom wl driver is vulnerable to heap buffer overflow HIGH (7.9) The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. If the vendor information element data length is larger than 164 bytes, a heap buffer overflow is triggered in wlc_wpa_plumb_gtk. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Published: 2020-02-03T21:00:20.000Z Updated: 2024-08-04T21:54:44.149Z Open on db.gcve.eu Reference links https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html https://kb.cert.org/vuls/id/166939/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9501`	vulnerable	2026-06-08 05:14:25.390853	Broadcom wl driver is vulnerable to heap buffer overflow HIGH (7.9) The Broadcom wl WiFi driver is vulnerable to a heap buffer overflow. By supplying a vendor information element with a data length larger than 32 bytes, a heap buffer overflow is triggered in wlc_wpa_sup_eapol. In the worst case scenario, by sending specially-crafted WiFi packets, a remote, unauthenticated attacker may be able to execute arbitrary code on a vulnerable system. More typically, this vulnerability will result in denial-of-service conditions. Published: 2020-02-03T21:00:19.000Z Updated: 2024-08-04T21:54:44.121Z Open on db.gcve.eu Reference links https://blog.quarkslab.com/reverse-engineering-broadcom-wireless-chipsets.html https://kb.cert.org/vuls/id/166939/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9499`	vulnerable	2026-06-08 05:14:25.383070	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-9498`	vulnerable	2026-06-08 05:14:25.379914	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-3870`	vulnerable	2026-06-08 05:13:56.248902	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-19344`	vulnerable	2026-06-08 05:13:22.181932	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-14907`	vulnerable	2026-06-08 05:12:56.410070	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.