CVE-2023-41738

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in Directory Domain Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Aug 31, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-417396.5Uncontrolled resource consumption vulnerability in File Functionality in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote autCVE-2023-41746.1A vulnerability has been found in mooSocial mooStore 3.1.6 and classified as problematic. Affected by this vulnerability is an unknown functCVE-2023-417405.3Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRCVE-2023-417417.5Exposure of sensitive information to an unauthorized actor vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346CVE-2023-417427.5Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, WinCVE-2023-417437.8Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber ProtectCVE-2023-417447.8Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) befCVE-2023-417455.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (LinuCVE-2023-417469.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before buildCVE-2023-417476.5Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows)CVE-2023-417489.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before buildCVE-2023-417497.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Wind
CVE-2023-41738: High severity, CVSS 8.8 | Vulnix