# Synology Router Manager


- [CVE-2023-32956](https://insights.sbomify.com/CVE-2023-32956/): Command injection in Synology Router Manager (SRM) (critical 9.8)
- [CVE-2020-27654](https://insights.sbomify.com/CVE-2020-27654/): Command injection in Synology Router Manager (SRM) (critical 9.8)
- [CVE-2018-1160](https://insights.sbomify.com/CVE-2018-1160/): Memory corruption in Netatalk (critical 9.8)
- [CVE-2017-14491](https://insights.sbomify.com/CVE-2017-14491/): Memory corruption in n/a (critical 9.8)
- [CVE-2019-11823](https://insights.sbomify.com/CVE-2019-11823/): Denial of service in Synology Router Manager (SRM) (high 8.6)
- [CVE-2020-27649](https://insights.sbomify.com/CVE-2020-27649/): Security feature bypass in Synology Router Manager (SRM) (high 8.3)
- [CVE-2020-27653](https://insights.sbomify.com/CVE-2020-27653/): Weak cryptography in Synology Router Manager (SRM) (high 8.3)
- [CVE-2024-11398](https://insights.sbomify.com/CVE-2024-11398/): Path traversal in Synology Router Manager (SRM) (high 8.1)
- [CVE-2023-32955](https://insights.sbomify.com/CVE-2023-32955/): Command injection in Synology Router Manager (SRM) (high 8.1)
- [CVE-2019-9498](https://insights.sbomify.com/CVE-2019-9498/): The implementations of EAP-PWD in hostapd EAP Server do not validate the scalar and element values in EAP-pwd-Commit (high 8.1)
- [CVE-2019-9499](https://insights.sbomify.com/CVE-2019-9499/): Auth bypass in hostapd with EAP-pwd support (high 8.1)
- [CVE-2019-9501](https://insights.sbomify.com/CVE-2019-9501/): Broadcom wl driver is vulnerable to heap buffer overflow (high 7.9)

---
From sbomify Insights: https://insights.sbomify.com/products/synology/router-manager/