CVE-2020-27651

MEDIUM

Synology Router Manager <1.2.4-8081 - Info Disclosure

Title source: llm
STIX 2.1

Description

Synology Router Manager (SRM) before 1.2.4-8081 does not set the Secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1059

Scores

CVSS v3 5.8
EPSS 0.0077
EPSS Percentile 52.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

Details

CWE
CWE-311 CWE-614
Status published
Products (1)
synology/router_manager 1.2 - 1.2.4-8081
Published Oct 29, 2020
Tracked Since Feb 18, 2026