Algorithm Downgrade Vulnerability in Synology Router Manager
CVE-2020-27653

8.3HIGH

Key Information:

Vendor

Synology
Status
Synology Router Manager (srm)
Vendor
CVE Published:
29 October 2020

What is CVE-2020-27653?

An algorithm downgrade vulnerability in Synology Router Manager (SRM) can allow man-in-the-middle attackers to exploit the communication protocol. These attackers can potentially spoof servers, leading to unauthorized access and the ability to obtain sensitive user information. This vulnerability affects versions of SRM before 1.2.4-8081, emphasizing the importance of keeping software updated to mitigate such security risks.

Affected Version(s)

Synology Router Manager (SRM) < 1.2.4-8081

References

https://www.synology.com/security/advisory/Synology_SA_20_14
x_refsource_CONFIRM
https://www.talosintelligence.com/vulnerability_reports/T...
x_refsource_MISC

CVSS V3.1

Score:
8.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.