CVE-2020-27653: High severity synology photos diskstation manager vulnerability
Published Oct 29, 2020
·Updated
Algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors.
Affected Software
3 affected components
Synology Diskstation Manager=6.2.3_25426
Synology Router Manager>=1.2<1.2.4-8081
Synology Diskstation Manager=6.2.3_25426
Event History
Oct 29, 2020
CVE Published
via MITRE·08:55 AM
Data Sourced
via MITRE·08:55 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2020-27653?
CVE-2020-27653 is an algorithm downgrade vulnerability in QuickConnect in Synology Router Manager (SRM) before 1.2.4-8081.
2
How does CVE-2020-27653 affect Synology DiskStation Manager?
CVE-2020-27653 affects Synology DiskStation Manager version 6.2.3_25426.
3
How does CVE-2020-27653 affect Synology Router Manager?
CVE-2020-27653 affects Synology Router Manager versions 1.2 to 1.2.4-8081.
4
What is the severity of CVE-2020-27653?
CVE-2020-27653 has a severity rating of 8.3 (high).
5
How can I fix CVE-2020-27653?
To fix CVE-2020-27653, update Synology Router Manager to version 1.2.4-8081 or later.