CVE-2021-26564
First published: Fri Feb 26 2021(Updated: )
Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session.
Credit: security@synology.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Synology DiskStation Manager | <6.2.3-25426-3 | |
| Synology Vs960hd Firmware | ||
| Synology Vs960hd | ||
| Synology Skynas Firmware | ||
| Synology Skynas | ||
| Synology Diskstation Manager Unified Controller | =3.0 | |
| Synology Uc3200 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-26564?
CVE-2021-26564 is a vulnerability that allows man-in-the-middle attackers to spoof servers via an HTTP session.
How severe is CVE-2021-26564?
CVE-2021-26564 has a severity score of 8.7, which is classified as high severity.
What software is affected by CVE-2021-26564?
Synology DiskStation Manager (DSM) before 6.2.3-25426-3 and Synology Vs960hd Firmware are affected by CVE-2021-26564.
How can man-in-the-middle attacks be prevented?
To prevent man-in-the-middle attacks, ensure that you are using secure protocols such as HTTPS, regularly update your software and devices, and use strong and unique passwords.
Where can I find more information about CVE-2021-26564?
You can find more information about CVE-2021-26564 at the official Synology security advisory (https://www.synology.com/security/advisory/Synology_SA_20_26) and the Talos Intelligence vulnerability report (https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160).
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/author
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/synology
- canonical/synology diskstation manager
- canonical/synology vs960hd firmware
- canonical/synology vs960hd
- canonical/synology skynas firmware
- canonical/synology skynas
- canonical/synology diskstation manager unified controller
- version/synology diskstation manager unified controller/3.0
- canonical/synology uc3200