Описание
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*
cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.00058
Низкий
5.5 Medium
CVSS3
4.4 Medium
CVSS3
Дефекты
CWE-201
CWE-668
Связанные уязвимости
CVSS3: 5.5
github
больше 2 лет назад
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
EPSS
Процентиль: 19%
0.00058
Низкий
5.5 Medium
CVSS3
4.4 Medium
CVSS3
Дефекты
CWE-201
CWE-668