CVE-2020-27657

Severity CVSS v4.0:
Pending analysis
Type:
CWE-319 Cleartext Transmission of Sensitive Information
Publication date:
29/10/2020
Last modified:
03/11/2020

Description

Cleartext transmission of sensitive information vulnerability in DDNS in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to eavesdrop authentication information of DNSExit via unspecified vectors.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:* 1.2 (including) 1.2.4-8081 (excluding)