{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T12:19:54.181","vulnerabilities":[{"cve":{"id":"CVE-2022-43932","sourceIdentifier":"security@synology.com","published":"2023-01-05T10:15:09.990","lastModified":"2026-06-17T05:07:30.117","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors."},{"lang":"es","value":"La neutralización inadecuada de elementos especiales en la salida utilizada por una vulnerabilidad de componente descendente (\"Inyección\") en el componente CGI en Synology Router Manager (SRM) anterior a v1.2.5-8227-6 y v1.3.1-9346-3 permite a atacantes remotos leer datos arbitrarios archivos a través de vectores no especificados."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"Synology Router Manager (SRM)","defaultStatus":"affected","versions":[{"version":"1.2","lessThan":"1.2.5-8227-6","versionType":"semver","status":"affected"},{"version":"1.3","lessThan":"1.3.1-9346-3","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@synology.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-10T14:18:09.594036Z","id":"CVE-2022-43932","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"1.2","versionEndExcluding":"1.2.5-8227-6","matchCriteriaId":"9701AC9D-05E6-4EAA-BD8D-E7993E92CFA0"},{"vulnerable":true,"criteria":"cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*","versionStartIncluding":"1.3","versionEndExcluding":"1.3.1-9346-3","matchCriteriaId":"5BE8A994-AE91-473C-9E84-42F72585700F"}]}]}],"references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_22_25","source":"security@synology.com","tags":["Vendor Advisory"]},{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_22_25","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}