CVE-2022-43932 Path traversal in Synology Router Manager (SRM)

High 7.5 Published 5 Jan 2023 Updated 10 Apr 2025

Remote attackers can read arbitrary files on Synology Router Manager devices via a CGI injection vulnerability.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2022-43932?

CVE-2022-43932 is a high-severity path traversal vulnerability in Synology Router Manager, published on 5 Jan 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote attackers to read arbitrary files via unspecified vectors.

Which versions are affected by CVE-2022-43932?

It affects 1 product.

Products include Synology Router Manager.

How do I fix CVE-2022-43932?

No fix has been published for CVE-2022-43932 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2022-43932 being exploited?

There is no known exploitation of CVE-2022-43932 in the wild and no public exploit code.

All Synology Router Manager vulnerabilities

Sources

Also known as GHSA-68gv-8qjc-g598.