SoftEther VPN 5.02
Approved changes feed: RSS · Atom
cpe:2.3:a:softether:vpn:5.02:*:*:*:*:*:*:*
part: a version: 5.02 update: *
| Vendor | Softether (24228175-3979-597c-a898-6e1ac567e51a) |
|---|---|
| Product | Vpn (37c756e7-5f82-594d-9c77-ab744981ebc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/softethervpn/softethervpn |
purl2cpe | 2026-06-01 10:14:36.344885 |
pkg:rpm/opensuse/softethervpn |
purl2cpe | 2026-06-01 10:14:36.344886 |
pkg:sourceforge/softethervpn |
purl2cpe | 2026-06-01 10:14:36.344888 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-38520 |
vulnerable | 2026-06-08 06:41:47.621386 |
SoftEther VPN with L2TP - 2.75x Amplification
MEDIUM (5.3)
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the possibility of the host being used for amplification/reflection traffic generation because it will respond to every packet with two response packets that are larger than the request packet size. These sorts of techniques are used by external actors who generate spoofed source IPs to target a destination on the internet. This vulnerability has been patched in version 5.02.5185.
Published: 2024-06-26T18:59:25.088Z
Updated: 2024-08-02T04:12:25.267Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27395 |
vulnerable | 2026-06-08 05:57:41.134698 |
Details available
CRITICAL (9)
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.988Z
Updated: 2024-08-02T12:09:43.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25774 |
vulnerable | 2026-06-08 05:56:10.596139 |
Details available
HIGH (7.5)
A denial-of-service vulnerability exists in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. A set of specially crafted network connections can lead to denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
Published: 2023-10-12T15:27:53.149Z
Updated: 2024-08-02T11:32:12.619Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23581 |
vulnerable | 2026-06-08 05:56:03.367617 |
Details available
HIGH (7.5)
A denial-of-service vulnerability exists in the vpnserver EnSafeHttpHeaderValueStr functionality of SoftEther VPN 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service.
Published: 2023-10-12T15:27:53.612Z
Updated: 2024-08-02T10:35:33.372Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22325 |
vulnerable | 2026-06-08 05:54:23.719891 |
Details available
MEDIUM (5.9)
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.526Z
Updated: 2024-08-02T10:07:06.113Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22308 |
vulnerable | 2026-06-08 05:54:23.624141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.