Approved changes feed: RSS · Atom

cpe:2.3:o:synology:skynas_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductSkynas Firmware (55fa58bf-550c-58cf-ade7-146fc11d0710)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27652 vulnerable 2026-06-08 05:23:52.910336 Details available
HIGH (8.3)
Algorithm downgrade vulnerability in QuickConnect in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via unspecified vectors.
Published: 2020-10-29T09:00:26.029Z
Updated: 2024-09-16T19:55:59.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27650 vulnerable 2026-06-08 05:23:52.909160 Details available
MEDIUM (5.8)
Synology DiskStation Manager (DSM) before 6.2.3-25426-2 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.
Published: 2020-10-29T09:00:25.555Z
Updated: 2024-09-16T23:10:20.265Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27648 vulnerable 2026-06-08 05:23:52.903873 Details available
HIGH (8.3)
Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Published: 2020-10-29T09:00:25.133Z
Updated: 2024-09-16T20:27:27.929Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.