CVE-2021-47961: High severity Synology SSL VPN Client vulnerability
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-47961?
CVE-2021-47961 has been assigned a medium severity rating due to its potential to allow unauthorized access to sensitive information.
How do I fix CVE-2021-47961?
To mitigate CVE-2021-47961, update your Synology SSL VPN Client to version 1.4.5-0685 or later.
Who is affected by CVE-2021-47961?
CVE-2021-47961 affects users of Synology SSL VPN Client versions prior to 1.4.5-0684.
What are the risks associated with CVE-2021-47961?
The risks of CVE-2021-47961 include unauthorized access to a user's PIN code and potential interception of VPN traffic.
Can CVE-2021-47961 be exploited remotely?
Yes, CVE-2021-47961 can be exploited remotely by attackers due to the insecure storage of passwords.