CVE-2021-47960mediumCWE-552

CVE-2021-47960: falha de média gravidade em Synology SSL VPN Client

Publicada em

Seguir esta CVE+ Monitorar Synology SSL VPN Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.2%
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Synology · Synology SSL VPN Client
CVEs relacionadas — Synology SSL VPN Client

No mesmo produto, das mais perigosas para as menos.

CVE-2021-47961HIGHCVE-2021-47961EPSS 0.3%CVE-2023-5748LOWCVE-2023-5748EPSS 0.2%