The OpenVPN module in Synology DiskStation Manager (DSM) 4.3-3810 update 1 has a hardcoded root password of synopass, which makes it easier for remote attackers to obtain access via a VPN session. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Information Disclosure
Synology
Diskstation Manager
NVD
CVSS 2.0
7.8
EPSS
0.6%
The caching feature in SGOS in Blue Coat ProxySG 5.5 through 5.5.11.3, 6.1 through 6.1.6.3, 6.2 through 6.2.15.3, 6.4 through 6.4.6.1, and 6.3 and 6.5 before 6.5.4 allows remote authenticated users. Rated high severity (CVSS 7.9). No vendor patch available.
Privilege Escalation
Proxysgos
NVD
CVSS 2.0
7.9
EPSS
0.1%