Synology Ssl Vpn Client
Approved changes feed: RSS · Atom
cpe:2.3:a:synology:synology_ssl_vpn_client:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Synology (65464e9b-7339-559d-9719-837f074e0220) |
|---|---|
| Product | Synology Ssl Vpn Client (0b4f333d-35a1-59ca-85ab-a4921d59b880) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5748 |
vulnerable | 2026-06-08 06:19:44.616039 |
Details available
LOW (3.3)
Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors.
Published: 2023-10-24T10:26:59.087Z
Updated: 2024-09-17T14:18:30.321Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47961 |
vulnerable | 2026-06-08 05:38:07.996298 |
Details available
HIGH (8.1)
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.
Published: 2026-04-10T09:22:37.522Z
Updated: 2026-04-10T12:42:56.656Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47960 |
vulnerable | 2026-06-08 05:38:07.995907 |
Details available
MEDIUM (6.5)
A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.
Published: 2026-04-10T09:21:54.559Z
Updated: 2026-04-10T12:43:33.313Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.