CVE-2024-39348 - OpenCVE

Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://www.synology.com/en-global/security/advisory/Synology_SA_23_16

History

No history.

MITRE

Status: PUBLISHED

Assigner: synology

Published: 2024-06-28T06:30:57.973Z

Updated: 2024-08-02T04:26:14.241Z

Reserved: 2024-06-24T10:57:17.891Z

Link: CVE-2024-39348

Vulnrichment

Updated: 2024-08-02T04:26:14.241Z

NVD

Status : Awaiting Analysis

Published: 2024-06-28T07:15:06.043

Modified: 2024-06-28T10:27:00.920

Link: CVE-2024-39348

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-39348", "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01", "state": "PUBLISHED", "assignerShortName": "synology", "dateReserved": "2024-06-24T10:57:17.891Z", "datePublished": "2024-06-28T06:30:57.973Z", "dateUpdated": "2024-08-02T04:26:14.241Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-494: Download of Code Without Integrity Check", "cweId": "CWE-494", "type": "CWE"}]}], "affected": [{"vendor": "Synology", "product": "Synology Router Manager (SRM)", "versions": [{"version": "1.3", "status": "affected", "lessThan": "1.3.1-9346-8", "versionType": "semver"}, {"version": "1.2", "status": "affected", "lessThan": "1.2.5-8227-11", "versionType": "semver"}, {"version": "0", "status": "unknown", "lessThan": "1.2", "versionType": "semver"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors."}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 7.5, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}}], "references": [{"url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_16", "name": "Synology-SA-23:16 SRM (PWN2OWN 2023)", "tags": ["vendor-advisory"]}], "credits": [{"lang": "en", "value": "Tomer Goldschmidt and Sharon Brizinov of Claroty Research - Team82", "type": "finder"}], "providerMetadata": {"orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01", "shortName": "synology", "dateUpdated": "2024-06-28T06:30:57.973Z"}}, "adp": [{"affected": [{"vendor": "synology", "product": "router_manager", "cpes": ["cpe:2.3:a:synology:router_manager:1.3:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.3", "status": "affected", "lessThan": "1.3.1-9346-8", "versionType": "custom"}]}, {"vendor": "synology", "product": "router_manager", "cpes": ["cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "1.2", "status": "affected", "lessThan": "1.2.5-8227-11", "versionType": "custom"}]}, {"vendor": "synology", "product": "router_manager", "cpes": ["cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.2", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-06-28T13:33:32.527252Z", "id": "CVE-2024-39348", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T13:39:34.938Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:14.241Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_16", "name": "Synology-SA-23:16 SRM (PWN2OWN 2023)", "tags": ["vendor-advisory", "x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_16", "name": "Synology-SA-23:16 SRM (PWN2OWN 2023)", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T04:26:14.241Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39348", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-06-28T13:33:32.527252Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:synology:router_manager:1.3:*:*:*:*:*:*:*"], "vendor": "synology", "product": "router_manager", "versions": [{"status": "affected", "version": "1.3", "lessThan": "1.3.1-9346-8", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:synology:router_manager:1.2:*:*:*:*:*:*:*"], "vendor": "synology", "product": "router_manager", "versions": [{"status": "affected", "version": "1.2", "lessThan": "1.2.5-8227-11", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*"], "vendor": "synology", "product": "router_manager", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-06-28T13:37:21.268Z"}}], "cna": {"credits": [{"lang": "en", "type": "finder", "value": "Tomer Goldschmidt and Sharon Brizinov of Claroty Research - Team82"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Synology", "product": "Synology Router Manager (SRM)", "versions": [{"status": "affected", "version": "1.3", "lessThan": "1.3.1-9346-8", "versionType": "semver"}, {"status": "affected", "version": "1.2", "lessThan": "1.2.5-8227-11", "versionType": "semver"}, {"status": "unknown", "version": "0", "lessThan": "1.2", "versionType": "semver"}], "defaultStatus": "affected"}], "references": [{"url": "https://www.synology.com/en-global/security/advisory/Synology_SA_23_16", "name": "Synology-SA-23:16 SRM (PWN2OWN 2023)", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "Download of code without integrity check vulnerability in AirPrint functionality in Synology Router Manager (SRM) before 1.2.5-8227-11 and 1.3.1-9346-8 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-494", "description": "CWE-494: Download of Code Without Integrity Check"}]}], "providerMetadata": {"orgId": "db201096-a0cc-46c7-9a55-61d9e221bf01", "shortName": "synology", "dateUpdated": "2024-06-28T06:30:57.973Z"}}}, "cveMetadata": {"cveId": "CVE-2024-39348", "state": "PUBLISHED", "dateUpdated": "2024-08-02T04:26:14.241Z", "dateReserved": "2024-06-24T10:57:17.891Z", "assignerOrgId": "db201096-a0cc-46c7-9a55-61d9e221bf01", "datePublished": "2024-06-28T06:30:57.973Z", "assignerShortName": "synology"}, "dataVersion": "5.1"}