Unrated severityNVD Advisory· Published Oct 29, 2020· Updated Sep 16, 2024
CVE-2020-27648
CVE-2020-27648
Description
Improper certificate validation vulnerability in OpenVPN client in Synology DiskStation Manager (DSM) before 6.2.3-25426-2 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<6.2.3-25426-2+ 1 more
- (no CPE)range: <6.2.3-25426-2
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- www.synology.com/security/advisory/Synology_SA_20_18mitrex_refsource_CONFIRM
- www.talosintelligence.com/vulnerability_reports/TALOS-2020-1058mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.