Synology Ssl Vpn Client vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Synology Ssl Vpn Client: 2 record(s), with affected versions and fixes.
cpe:2.3:a:synology:ssl_vpn_client

CVE-2021-47961 High · 8.1 CWE-256 Apr 10, 2026

A plaintext storage of a password vulnerability in Synology SSL VPN Client before…

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.

CVE-2021-47960 Medium · 6.5 CWE-552 Apr 10, 2026

Files or Directories Accessible to External Parties in Synology Ssl Vpn Client

A files or directories accessible to external parties vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access files within the installation directory via a local HTTP server bound to the loopback interface. By leveraging user interaction with a crafted web page, attackers may retrieve sensitive files such as configuration files, certificates, and logs, leading to information disclosure.