CVE-2018-8929

—

CVSS 3.0

8.1 high

EPSS

<1%p53

Published

Jul 6, 2018 (Jul 6, 2018)

Modified

Jun 17, 2026

Description

Improper restriction of communication channel to intended endpoints vulnerability in HTTP daemon in Synology SSL VPN Client before 1.2.4-0224 allows remote attackers to conduct man-in-the-middle attacks via a crafted payload.

Vendors: synology
Products: ssl vpn client
Weakness: CWE-319, CWE-417
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.