CVE-2018-13283CWE-671

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct…

High · published April 1, 2019

CVSS v3.0
8.8
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct man-in-the-middle attacks via the (1) command, (2) hostname, or (3) port parameter.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01384 · 72.0th percentile
Weakness
CWE-671 · Lack of Administrator Control over Security
Published
2019-04-01T14:25Z
EPSS history
Timeline
  • 01 APR 14:25Z
    Lack of administrator control over security vulnerability in client.cgi in Synology SSL VPN Client before 1.2.5-0226 allows remote attackers to conduct…
    cvelistv5