Synology

Ssl Vpn Client

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2023-5748

  • EPSS 0.09%
  • Published 07.11.2023 04:24:19
  • Last modified 21.11.2024 08:42:24

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors.

7.4

CVE-2018-13283

  • EPSS 0.3%
  • Published 01.04.2019 15:29:00
  • Last modified 21.11.2024 03:46:45

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the (1) command, (2) hostname, or (3) port parameter.

8.1

CVE-2018-8929

  • EPSS 0.19%
  • Published 06.07.2018 12:29:00
  • Last modified 21.11.2024 04:14:37

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote attackers to conduct man-in-the-middle attacks via a crafted payload.