Lucene search
HistoryJun 28, 2024 - 7:15 a.m.
CVE-2024-39347
synology router manager
firewall functionality
default permissions vulnerability
man-in-the-middle attack
highly sensitive intranet resources
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
29.3%
Incorrect default permissions vulnerability in firewall functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to access highly sensitive intranet resources via unspecified vectors.
Related
cve
cve
CVE-2024-39347
2024-06-28 07:15:05
cvelist
cvelist
CVE-2024-39347
2024-06-28 06:30:10
vulnrichment
vulnrichment
CVE-2024-39347
2024-06-28 06:30:10
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
29.3%
Related for NVD:CVE-2024-39347