Vulnerability Database

300,445

Total vulnerabilities in the database

CVE-2018-13285

Command injection vulnerability in ftpd in Synology Router Manager (SRM) before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.

  • Published: Apr 1, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2018-13285
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 9
  • AV:N/AC:L/Au:S/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
synology / router_manager 1.1 1.1.7-6941-1