PT-2020-4937 · Synology · Synology Router Manager

Claudio Bozzato · Published 2020-10-29 · Updated 2020-11-06 · CVE-2020-27651

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Synology Router Manager (SRM) versions prior to 1.2.4-8081

Description: The issue is related to the absence of the Secure flag in session cookies. This makes it easier for remote attackers to capture the session cookie by intercepting its transmission within an HTTP session, potentially allowing unauthorized access to the target device.

Recommendations: For versions prior to 1.2.4-8081, update to version 1.2.4-8081 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive areas of the Synology Router Manager to minimize the risk of exploitation.

Exploit

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-614

CWE-311

Related Identifiers

BDU:2020-05512

CVE-2020-27651

Affected Products

Synology Router Manager

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1059 · Exploit
• https://osv.dev/vulnerability/CVE-2020-27651 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-05512 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-27651 · Security Note
• https://synology.com/security/advisory/Synology_SA_20_14 · Vendor Advisory
• https://synology.com/ru-ru/security/advisory/Synology_SA_20_14 · Note
• https://t.me/cybersecuritytechnologies/2005 · Telegram Post
• https://t.me/cvenotify/5247 · Telegram Post