« Volver al listado

CVE-2025-29844

Estado: AnalizadaMedia (4.3)—

A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Synology — Router Manager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-29844",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-29844",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-04T18:55:13.781208Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@synology.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@synology.com",
      "affectedData": [
        {
          "vendor": "Synology",
          "product": "Synology Router Manager (SRM)",
          "versions": [
            {
              "status": "affected",
              "version": "1.3",
              "lessThan": "1.3.1-9346-13",
              "versionType": "semver"
            },
            {
              "status": "unknown",
              "version": "0",
              "lessThan": "1.3",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2025-12-04T15:15:56.493",
  "references": [
    {
      "url": "https://www.synology.com/en-global/security/advisory/Synology_SA_25_04",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@synology.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@synology.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en el cgi de archivos de FileStation permite a usuarios autenticados remotos leer metadatos de archivos e información de ruta."
    }
  ],
  "lastModified": "2026-09-25T23:10:00.463",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:synology:router_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8046DA6-36F6-4155-8594-8E7057396BFB",
              "versionEndExcluding": "1.3.1-9346",
              "versionStartIncluding": "1.3"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1516A124-FB02-4ADA-BCB6-27F0F1170A11"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BD983E13-D56A-4E76-9689-0F1AE99CEC7E"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update10:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8DAD6899-921F-40D5-AACB-613C7332EB72"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update11:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEC790E3-A59E-4A9D-A4A1-85284CF9A19D"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update12:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B566549-0C15-4F15-ADDD-9504B373E9D5"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7C642E1B-1E10-444E-9243-7A7E8ECBD17D"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B7544B4B-5BB7-4D58-8943-98DACC17E5F3"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5A7269FD-9F1D-4CA3-A8F6-3A13C967FBD7"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "52005D46-FFB0-44DF-9583-7EB436F2CDF0"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E50F7D87-1D71-4AA7-A6C8-B15744521D23"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFE129E2-9243-4DB3-9D2F-9E0F886ECCC6"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update8:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "185CD5A8-1115-40AF-91DD-E0065E1ACD7A"
            },
            {
              "criteria": "cpe:2.3:o:synology:router_manager:1.3.1-9346:update9:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0162C158-37F0-401F-9027-C067335C0A28"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@synology.com"
}