Skip to content
OpenAdvisories
High · 7.3 CVE-2018-8929 EUVD-2018-20537GHSA-x728-vr6f-27f3

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-02…

Published Jul 6, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: SSL VPN Client

Description

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote attackers to conduct man-in-the-middle attacks via a crafted payload.

Affected products

VendorProductAffectedFixed
Synology SSL VPN Client unspecified – < 1.2.4-0224 1.2.4-0224

References