CVE-2021-47961
High · 8.1CVSS
8.1
EPSS
0.3%
Published
Apr 10, 2026
CISA due date
—
The record
A plaintext storage of a password vulnerability in Synology SSL VPN Client before 1.4.5-0684 allows remote attackers to access or influence the user's PIN code due to insecure storage. This may lead to unauthorized VPN configuration and potential interception of subsequent VPN traffic when combined with user interaction.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19051 Plaintext storage of a password vulnerability in Menulux Software Inc. CWE-256
- CVE-2026-15933 OptimiDoc Server (On-Premise) stores credentials for external services in cleartext. CWE-256
- CVE-2021-38489 HDD password plaintext is stored in a UEFI variable. CWE-256
- CVE-2026-55164 Lemur manages TLS certificate creation. CWE-256
- CVE-2026-14867 Credentials of built-in users are insecurely stored in the User directory of PcVue… CWE-256
- CVE-2026-57302 Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml… CWE-256
- CVE-2026-50268 Steeltoe is an open source project that provides a collection of libraries that helps… CWE-256
- CVE-2024-39575 update_disk_psu_baseline.sh requires password in plain text CWE-256