Multiple vulnerabilities were identified in Synology products. These vulnerabilities allow remote authenticated users to inject SQL command or read and write arbitrary files via a susceptible version of Synology Router Manager (SRM). Vulnerabilities affect Synology Router Manager (SRM) versions 1.2 and 1.3 and were fixed in version 1.3.1-9316.

More information on vulnerabilities and updates is available in Synology security advisory – synology.com.