CVE-2023-52950

Vulnerability

Missing encryption of sensitive data in the login component of Synology Active Backup for Business Agent before version 2.7.0-3221 allows an adjacent man-in-the-middle attacker to obtain user credentials via unspecified vectors [1]. The vulnerability affects all versions prior to the fix.

Exploitation

An attacker must be on the same network (adjacent) and perform a man-in-the-middle attack. The CVSS attack complexity is High (AC:H), indicating that special conditions or a race window may be required. No authentication or user interaction is needed [1]. The exact exploitation steps are not disclosed, but the attack involves intercepting unencrypted sensitive data during the login process.

Impact

Successful exploitation results in the disclosure of user credentials, leading to a High confidentiality impact. Integrity and availability are not affected [1]. The attacker can use the obtained credentials to access the backup agent or potentially other systems.

Mitigation

Synology has released version 2.7.0-3221 which fixes the vulnerability. Users should upgrade to this version or later. No workaround is available [1].