SoftEther VPN 5.01.9674
Approved changes feed: RSS · Atom
cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*
part: a version: 5.01.9674 update: *
| Vendor | Softether (24228175-3979-597c-a898-6e1ac567e51a) |
|---|---|
| Product | Vpn (37c756e7-5f82-594d-9c77-ab744981ebc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/softethervpn/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340779 |
pkg:rpm/opensuse/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340780 |
pkg:sourceforge/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340781 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32634 |
vulnerable | 2026-06-08 06:04:46.666696 |
Details available
HIGH (7.8)
An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:51.751Z
Updated: 2025-11-04T19:16:23.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32275 |
vulnerable | 2026-06-08 06:04:45.317839 |
Details available
MEDIUM (5.5)
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Published: 2023-10-12T15:27:52.706Z
Updated: 2025-11-04T19:16:04.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31192 |
vulnerable | 2026-06-08 06:04:42.146746 |
Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:51.300Z
Updated: 2025-11-04T19:15:58.051Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27516 |
vulnerable | 2026-06-08 05:57:41.772900 |
Details available
HIGH (7.3)
An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability.
Published: 2023-10-12T15:27:52.223Z
Updated: 2024-08-02T12:16:36.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27395 |
vulnerable | 2026-06-08 05:57:41.134179 |
Details available
CRITICAL (9)
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.988Z
Updated: 2024-08-02T12:09:43.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25774 |
vulnerable | 2026-06-08 05:56:10.596092 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23581 |
vulnerable | 2026-06-08 05:56:03.366881 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22325 |
vulnerable | 2026-06-08 05:54:23.719865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22308 |
vulnerable | 2026-06-08 05:54:23.623603 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.