Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology Router Manager (SRM) before 1.3.1-9346-6 allows remote attackers to read specific files via unspecified vectors.
Credits
Claroty Research - Vera Mens, Uri Katz, Noam Moshe, Sharon Brizinov