High severity8.3NVD Advisory· Published Oct 29, 2020· Updated Jun 17, 2026
CVE-2020-27649
CVE-2020-27649
Description
Improper certificate validation vulnerability in OpenVPN client in Synology Router Manager (SRM) before 1.2.4-8081 allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<1.2.4-8081+ 1 more
- (no CPE)range: <1.2.4-8081
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
2- www.talosintelligence.com/vulnerability_reports/TALOS-2020-1058nvdExploitThird Party Advisory
- www.synology.com/security/advisory/Synology_SA_20_14nvdVendor Advisory
News mentions
0No linked articles in our index yet.