-
Byte Open Security
(ByteOS Network)
Log In
Sign Up
NVD Vulnerability Details :
CVE-2025-29845
Analyzed
More Info
Official Page
Source
-
security@synology.com
View Known Exploited Vulnerability (KEV) details
Published At
-
04 Dec, 2025 | 15:15
Updated At
-
05 Dec, 2025 | 21:43
A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.
CISA Catalog
Date Added
Due Date
Vulnerability Name
Required Action
N/A
Date Added:
N/A
Due Date:
N/A
Vulnerability Name:
N/A
Required Action:
N/A
Metrics
Type
Version
Base score
Base severity
Vector
Primary
3.1
4.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Type:
Primary
Version:
3.1
Base score:
4.3
Base severity:
MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CPE Matches
Synology, Inc.
synology
>>
router_manager
>>
Versions from 1.3(inclusive) to 1.3.1-9346(exclusive)
cpe:2.3:o:synology:router_manager:*:*:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:-:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update1:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update10:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update11:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update12:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update2:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update3:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update4:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update5:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update6:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update7:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update8:*:*:*:*:*:*
Synology, Inc.
synology
>>
router_manager
>>
1.3.1-9346
cpe:2.3:o:synology:router_manager:1.3.1-9346:update9:*:*:*:*:*:*
Load More
Weaknesses
CWE ID
Type
Source
CWE-22
Primary
security@synology.com
CWE ID:
CWE-22
Type:
Primary
Source:
security@synology.com
Evaluator Description
Evaluator Impact
Evaluator Solution
Vendor Statements
References
Hyperlink
Source
Resource
https://www.synology.com/en-global/security/advisory/Synology_SA_25_04
security@synology.com
Vendor Advisory
Hyperlink:
https://www.synology.com/en-global/security/advisory/Synology_SA_25_04
Source:
security@synology.com
Resource:
Vendor Advisory
Change History
0
Changes found
Details not found