The manufacturer Synology is currently warning of dangerous security gaps in its VPN Plus servers. A vulnerability classified by the company as critical allows attackers to execute arbitrary commands on the router where VPN Plus Server is installed.
VPN Plus Server for SRM 1.3 and VPN Plus Server for SRM 1.2 are affected. Synology offers a Router update to close these vulnerabilities.