Security Advisory

CVE-2020-27649

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-29 08:55:20
Last updated 2024-09-16 17:18:38
Assigner synology
CVSS score 8.3
State PUBLISHED

Description

Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.