CVE-2020-27652: High severity synology photos diskstation manager vulnerability
Published Oct 29, 2020
·Updated
Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors.
Affected Software
6 affected components
Synology Diskstation Manager>=6.2<6.2.3-25426-2
Synology Skynas Firmware<6.2.3-25426
Synology Skynas
Synology Diskstation Manager>=6.2<6.2.3-25426-2
All of the following
Synology Skynas Firmware<6.2.3-25426
Synology Skynas
Event History
Oct 29, 2020
CVE Published
via MITRE·09:00 AM
Data Sourced
via MITRE·09:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-27652.
2
What is the title of this vulnerability?
The title of this vulnerability is 'Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3...'
3
What is the severity of CVE-2020-27652?
The severity of CVE-2020-27652 is high.
4
How does this vulnerability affect Synology DiskStation Manager?
This vulnerability affects Synology DiskStation Manager versions before 6.2.3-25426-2.
5
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by performing a man-in-the-middle attack to spoof servers and obtain sensitive information.