CVE-2019-11823

moderate-risk
Published 2020-05-04

CRLF injection vulnerability in Network Center in Synology Router Manager (SRM) before 1.2.3-8017-2 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via crafted network traffic.

Do I need to act?

~
1.1% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
8
CVSS 8.6/10 High
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Synology

References (4)

Vendor Advisory https://www.synology.com/security/advisory/Synology_SA_20_11
Exploit https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1051
Vendor Advisory https://www.synology.com/security/advisory/Synology_SA_20_11
Exploit https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1051
37
/ 100
moderate-risk
Severity 29/34 · Critical
Exploitability 3/34 · Minimal
Exposure 5/34 · Minimal