First published: Thu Oct 29 2020(Updated: )
Improper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via inbound QuickConnect traffic.
Credit: security@synology.com
Affected Software | Affected Version | How to fix |
---|---|---|
Synology Router Manager | >=1.2<1.2.4-8081 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID is CVE-2020-27655.
The severity of CVE-2020-27655 is critical.
CVE-2020-27655 allows remote attackers to access restricted resources in Synology Router Manager (SRM) before version 1.2.4-8081 via inbound QuickConnect traffic.
The affected software of CVE-2020-27655 is Synology Router Manager (SRM) before version 1.2.4-8081.
You can find more information about CVE-2020-27655 in the Synology security advisory (Synology_SA_20_14) and the Talos Intelligence vulnerability report (TALOS-2020-1066).