CVE-2021-47961

HIGH 8.1CVE-2021-47961 · Published 10/04/2026 · updated 17/06/2026

In short

CVE-2021-47961 is a HIGH (CVSS 8.1) vulnerability affecting ssl vpn client (synology).
Chance of exploitation in the next 30 days (EPSS): 0.32%, higher than 25.3% of all vulnerabilities.
Fix: update to 1.4.5-0684 or later.

Package	Affected versions	Patched versions
ssl vpn client synology	`< 1.4.5-0684`	`1.4.5-0684`

Description

A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.

References

synology.com/en-global/security/advisory/Synology_SA_26_05 · Vendor Advisory

More vulnerabilities in ssl vpn client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

ssl vpn client

synology

< 1.4.5-0684

1.4.5-0684

Description

More vulnerabilities in ssl vpn client

See all →