Описание
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- PatchVendor Advisory
- ExploitThird Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*
EPSS
Процентиль: 60%
0.00402
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-457
CWE-908
Связанные уязвимости
CVSS3: 5.3
github
больше 2 лет назад
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
EPSS
Процентиль: 60%
0.00402
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-457
CWE-908