PT-2020-4934 · Synology · Synology Router Manager

Claudio Bozzato · Published 2020-10-29 · Updated 2022-11-16 · CVE-2020-27654

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Synology Router Manager (SRM) versions prior to 1.2.4-8081

Description: The issue is related to improper access control in the lbd service of Synology Router Manager (SRM), allowing remote attackers to execute arbitrary commands. This can be done via ports 7786/tcp or 7787/tcp.

Recommendations: For versions prior to 1.2.4-8081, update to version 1.2.4-8081 or later to resolve the issue. As a temporary workaround, consider restricting access to ports 7786/tcp and 7787/tcp to minimize the risk of exploitation.

Exploit

Fix

Improper Access Control

Improper Privilege Management

Weakness Enumeration

CWE-284

CWE-269

Related Identifiers

BDU:2020-05509

CVE-2020-27654

Affected Products

Synology Router Manager

References · 9

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1065 · Exploit
• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1064 · Exploit
• https://osv.dev/vulnerability/CVE-2020-27654 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27654 · Security Note
• https://bdu.fstec.ru/vul/2020-05509 · Security Note
• https://synology.com/security/advisory/Synology_SA_20_14 · Vendor Advisory
• https://synology.com/ru-ru/security/advisory/Synology_SA_20_14 · Note
• https://t.me/cybersecuritytechnologies/2005 · Telegram Post
• https://t.me/cvenotify/5167 · Telegram Post