Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
References
Link | Resource |
---|---|
https://www.synology.com/security/advisory/Synology_SA_20_18 | Vendor Advisory |
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1058 | Exploit Third Party Advisory |
Configurations
History
No history.
Information
Published : 2020-10-29 09:15
Updated : 2024-02-28 18:08
NVD link : CVE-2020-27648
Mitre link : CVE-2020-27648
CVE.ORG link : CVE-2020-27648
JSON object : View
Products Affected
synology
- skynas
- diskstation_manager
- skynas_firmware
CWE
CWE-295
Improper Certificate Validation