CVE-2020-27658 : Security Advisory and Response

Synology Router Manager (SRM) before 1.2.4-8081 is vulnerable to a security issue due to the absence of the HTTPOnly flag in a Set-Cookie header, potentially exposing sensitive information to remote attackers.

Understanding CVE-2020-27658

This CVE involves a vulnerability in Synology Router Manager (SRM) that could allow attackers to access sensitive information through the session cookie.

What is CVE-2020-27658?

CVE-2020-27658 is a security vulnerability in Synology Router Manager (SRM) versions prior to 1.2.4-8081, where the absence of the HTTPOnly flag in the Set-Cookie header for the session cookie can facilitate unauthorized access to potentially sensitive data.

The Impact of CVE-2020-27658

The vulnerability poses a high severity risk, with a CVSS base score of 7.1. Attackers can exploit this issue to obtain sensitive information through script access to the session cookie.

Technical Details of CVE-2020-27658

This section provides more in-depth technical insights into the CVE.

Vulnerability Description

The vulnerability in Synology Router Manager (SRM) allows remote attackers to access sensitive information by not including the HTTPOnly flag in the Set-Cookie header for the session cookie.

Affected Systems and Versions

Product: Synology Router Manager (SRM)
Vendor: Synology
Versions Affected: < 1.2.4-8081

Exploitation Mechanism

Attack Complexity: Low
Attack Vector: Network
Privileges Required: None
User Interaction: Required
Scope: Changed
Confidentiality Impact: Low
Integrity Impact: Low
Availability Impact: Low

Mitigation and Prevention

Protecting systems from CVE-2020-27658 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Synology Router Manager (SRM) to version 1.2.4-8081 or later.
Monitor network traffic for any suspicious activities.

Long-Term Security Practices

Implement secure coding practices to prevent similar vulnerabilities.
Regularly review and update security configurations.

Patching and Updates

Apply security patches and updates provided by Synology to address the vulnerability.