CVE-2023-5748

—

CVSS 3.1

5.5 medium

EPSS

<1%p9

Published

Nov 7, 2023 (Nov 7, 2023)

Modified

Jun 17, 2026

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors.

Vendors: synology
Products: ssl vpn client
Weakness: CWE-120
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.