PT-2026-31906 · Synology · Synology Ssl Vpn Client

Laurent Sibilla · Published 2026-04-10 · Updated 2026-04-10 · CVE-2021-47961

Mitre

CVSS v3.1

8.1

High

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.

Fix

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2021-47961

Affected Products

Synology Ssl Vpn Client

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-47961 · Security Note
• https://synology.com/en-global/security/advisory/Synology_SA_26_05 · Vendor Advisory
• https://twitter.com/CVEnew/status/2042561704522060057 · Twitter Post