Synology SSL VPN Client
Moderate fix1 remedy
cpe:2.3:a:synology:ssl_vpn_client:*:*:*:*:*:*:*
Moderate fix1 remedy
- < 1.4.5-0684
Synology SSL VPN Client Plaintext Password Storage Vulnerability
Vulnerability
Patched
A vulnerability allowing plaintext storage of passwords has been identified in Synology SSL VPN Client versions prior to 1.4.5-0684. This vulnerability enables remote attackers to access or manipulate the user's PIN code due to insecure storage practices. The issue could lead to unauthorized VPN configuration and interception of VPN traffic, particularly when combined with user interaction.
Impact
Exploitation of this vulnerability could result in unauthorized access to or manipulation of VPN configuration, allowing interception of VPN traffic.
Remediation
Users are advised to upgrade to Synology SSL VPN Client version 1.4.5-0684 or above.
Added: Apr 10, 2026, 10:46 AM
Updated: Apr 10, 2026, 10:46 AM
Vulnerability Rating
Custom Algorithm
spread
5.4impact
3.1exploitability
4.2remediation
7.7relevance
5.6threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.