Bienpnn

Name of the Vulnerable Software and Affected Versions: Synology Router Manager versions prior to 1.2.5-8227-11 Synology Router Manager versions prior to 1.3.1-9346-8 Description: The issue is related to the AirPrint functionality in Synology Router Manager, where code is loaded without integrity checks. This allows a remote attacker to execute arbitrary code, potentially via man-in-the-middle attacks. Recommendations: For Synology Router Manager versions prior to 1.2.5-8227-11, update to version 1.2.5-8227-11 or later. For Synology Router Manager versions prior to 1.3.1-9346-8, update to version 1.3.1-9346-8 or later.

The issue is related to an integer overflow in the Windows CD-ROM File System Driver. This allows a remote attacker to execute arbitrary code by using a specially crafted ISO file. The vulnerability can be exploited to affect the system.

The issue is related to weaknesses in the authentication procedure of the web interface of the affected routers. This could allow a remote attacker to gain partial administrative privileges and perform unauthorized actions. The vulnerability may also enable an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause a denial of service (DoS).

The issue is related to a read past the end of an allocated buffer in the NetUSB.ko module, which can be exploited by network-adjacent attackers to execute arbitrary code on affected installations of TP-Link AC1750 routers. The flaw exists due to the lack of proper validation of user-supplied data. An attacker can leverage this vulnerability to execute code in the context of the root user. No information is provided about the estimated number of potentially affected devices or real-world incidents.