← Back

CVE-2021-47961

nvd nist
Published: Apr 10, 2026Modified: Jun 17, 2026

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Exploitability: 2.8 / Impact: 5.2
Source: security@synology.com (Secondary)

Description

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.

Affected (1)

Synology
1 product
Ssl Vpn Client
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Ssl Vpn Client
Before 1.4.5-0684

Related CWEs

CWE-256
Plaintext Storage of a Password
Storing a password in plaintext may result in a system compromise.

References (1)

Source: security@synology.com
Vendor Advisory

Timeline

No history available yet.