Algorithm Downgrade Vulnerability in Synology Router Manager
CVE-2020-27653

8.3HIGH

Key Information:

Vendor

Synology
Status
Synology Router Manager (srm)
Vendor
CVE Published:
29 October 2020

What is CVE-2020-27653?

An algorithm downgrade vulnerability in Synology Router Manager (SRM) can allow man-in-the-middle attackers to exploit the communication protocol. These attackers can potentially spoof servers, leading to unauthorized access and the ability to obtain sensitive user information. This vulnerability affects versions of SRM before 1.2.4-8081, emphasizing the importance of keeping software updated to mitigate such security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Synology Router Manager (SRM) < 1.2.4-8081

References

https://www.synology.com/security/advisory/Synology_SA_20_14
x_refsource_CONFIRM
https://www.talosintelligence.com/vulnerability_reports/T...
x_refsource_MISC

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.