PT-2020-16751
CVE-2020-27657
·
Published
2020-10-29
·
Updated
2020-11-03
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Synology Router Manager (SRM) versions prior to 1.2.4-8081
Description
A cleartext transmission of sensitive information issue in DDNS allows man-in-the-middle attackers to eavesdrop on authentication information of DNSExit.
Recommendations
For versions prior to 1.2.4-8081, update to version 1.2.4-8081 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾