CVE-2021-26565
CVSS 3.1 Score 5.9 of 10 (medium)
Details
Published Feb 26, 2021
Updated: Jan 14, 2025
CWE ID 319
Summary
CVE-2021-26565 is a cleartext transmission vulnerability affecting Synology DiskStation Manager (DSM) prior to version 6.2.3-25426-3. This issue allows man-in-the-middle attackers to intercept and obtain sensitive information during HTTP sessions due to the unencrypted transmission of data. The vulnerability can potentially expose login credentials and other confidential information, posing a significant security risk. It is recommended that users update their Synology DSM installations to the latest version to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
- Synology Diskstation Manager Unified Controller
Affected Vendors
- Synology