Synway vulnerabilities
We track 2 vulnerabilities in Synway products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on April 30, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest Synway vulnerabilities
- 9.8 Critical severity
Synway SMG Gateway Management Software: Improper Neutralization of Special Elements used in an OS Command
Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radius_address POST parameter is split and interpolated directly into a sed command without sanitization.
- 7.3 High severity
SMG Gateway Management Software: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attac