Medium · 5.9 CVE-2023-52951 EUVD-2023-60579GHSA-qcc6-8w82-xq69

A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle a…

Published Jun 3, 2026 · Updated Jun 3, 2026 · Assigned by synology

Vendor: Synology Product: Synology Note Station Client

Description

A cleartext transmission of sensitive information vulnerability in Synology Note Station Client before 2.2.4-703 allows man-in-the-middle attackers to obtain user credential.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Note Station Client	< 2.2.4-703	2.2.4-703

References

Release note vendor-advisory