Ransomwarehigh
Some Synology products impacted by recently disclosed OpenSSL flaws
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2021-3711+1 related CVE | In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt() | 9.8 group max | 88% |
From the original article
2 min read at securityaffairs.comTaiwan vendor Synology announced that recently disclosed vulnerabilities (CVE-2021-3711 and CVE-2021-3712) in the OpenSSL impact some of its products. Taiwanese company Synology revealed that the recently disclosed remote code execution (RCE) and denial-of-service (DoS) OpenSSL vulnerabilities ( CVE-2021-3711 and CVE-2021-3712 ) impact some of its products.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.