CVE-2023-5748

Low

Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VPN Client before 1.4.7-0687 allows local users to conduct denial-of-service attacks via unspecified vectors.

SeverityLow

CVSS3.3

Exploit probability—

ProductSynology Ssl Vpn Client

PublishedNov 7, 2023

First seenNov 7, 2023

Weakness typeCWE-120CWE-120

How to fix

Update

synology ssl_vpn_client1.4.7-0687 or later

Vendor advisories

synology.com/en-global/security/advisory/Synology_SA_23_12

Affected products

Product	Affected versions	Fixed in
synology ssl_vpn_client	v < 1.4.7-0687	1.4.7-0687

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.