CVE-2020-27657: Medium severity Synology Router Manager vulnerability
Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability CVE-2020-27657 about?
CVE-2020-27657 is a vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 that allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit due to cleartext transmission of sensitive information in DDNS.
Who is affected by the CVE-2020-27657 vulnerability?
The CVE-2020-27657 vulnerability affects users of Synology Router Manager (SRM) versions before 1.2.4-8081.
How severe is the CVE-2020-27657 vulnerability?
The severity of CVE-2020-27657 is medium, with a CVSS score of 5.9.
What is the Common Weakness Enumeration (CWE) ID for CVE-2020-27657?
The CWE ID for CVE-2020-27657 is CWE-319.
How can I fix the CVE-2020-27657 vulnerability?
To fix CVE-2020-27657, users should update to Synology Router Manager (SRM) version 1.2.4-8081 or later, as recommended by Synology.