Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-47961

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure stor

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Synology SSL VPN Client

Default version status: affected

  • * to < 1.4.5-0684affected

References