What’s Vulnerable › Vulnerabilities
CVE-2021-47961
- Severity: high (CVSS 8.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-04-10 · updated 2026-06-17
- Weakness: CWE-256
Description
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.
Affected products
- Synology SSL VPN Client: before 1.4.5-0684 — fixed in 1.4.5-0684
How to fix
Upgrade to a fixed version: Synology SSL VPN Client 1.4.5-0684. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-47961 or the next vulnerability affects your stack