CVE-2021-47961highCWE-256

CVE-2021-47961: high-severity vulnerability in Synology SSL VPN Client

Published

Follow this CVE+ Monitor Synology SSL VPN Client

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.3%
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
Synology · Synology SSL VPN Client
Related CVEs — Synology SSL VPN Client

In the same product, most dangerous first.

CVE-2023-5748LOWCVE-2023-5748EPSS 0.2%CVE-2021-47960MEDIUMCVE-2021-47960EPSS 0.2%