{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-10-01T15:15:31.074","vulnerabilities":[{"cve":{"id":"CVE-2023-41738","sourceIdentifier":"security@synology.com","published":"2023-08-31T10:15:08.417","lastModified":"2026-06-17T06:22:43.363","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors."},{"lang":"es","value":"Neutralización incorrecta de elementos especiales utilizados en un comando del sistema operativo (vulnerabilidad de 'inyección de comandos' del sistema operativo) en la funcionalidad de dominio de directorio en Synology Router Manager (SRM) anterior a 1.3.1-9346-6 permite a usuarios autenticados remotos ejecutar comandos arbitrarios a través de vectores no especificados."}],"affected":[{"source":"security@synology.com","affectedData":[{"vendor":"Synology","product":"Synology Router Manager (SRM)","defaultStatus":"affected","versions":[{"version":"1.3","lessThan":"1.3.1-9346-6","versionType":"semver","status":"affected"},{"version":"0","lessThan":"1.3","versionType":"semver","status":"unknown"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security@synology.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","baseScore":7.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-10-01T17:57:46.007026Z","id":"CVE-2023-41738","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*","versionEndExcluding":"1.3.1-9346-6","matchCriteriaId":"60F8F9E6-060A-44F5-B41E-EF2E1A233776"}]}]}],"references":[{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_23_10","source":"security@synology.com","tags":["Vendor Advisory"]},{"url":"https://www.synology.com/en-global/security/advisory/Synology_SA_23_10","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}