SoftEther VPN 4.41-9782 Beta
Approved changes feed: RSS · Atom
cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*
part: a version: 4.41-9782 update: beta
| Vendor | Softether (24228175-3979-597c-a898-6e1ac567e51a) |
|---|---|
| Product | Vpn (37c756e7-5f82-594d-9c77-ab744981ebc0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/softethervpn/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340775 |
pkg:rpm/opensuse/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340776 |
pkg:sourceforge/softethervpn |
purl2cpe | 2026-06-01 10:14:36.340777 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-32634 |
vulnerable | 2026-06-08 06:04:46.666540 |
Details available
HIGH (7.8)
An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:51.751Z
Updated: 2025-11-04T19:16:23.506Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32275 |
vulnerable | 2026-06-08 06:04:45.317786 |
Details available
MEDIUM (5.5)
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Published: 2023-10-12T15:27:52.706Z
Updated: 2025-11-04T19:16:04.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27516 |
vulnerable | 2026-06-08 05:57:41.772719 |
Details available
HIGH (7.3)
An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability.
Published: 2023-10-12T15:27:52.223Z
Updated: 2024-08-02T12:16:36.884Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-27395 |
vulnerable | 2026-06-08 05:57:41.133407 |
Details available
CRITICAL (9)
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.988Z
Updated: 2024-08-02T12:09:43.368Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-22325 |
vulnerable | 2026-06-08 05:54:23.719817 |
Details available
MEDIUM (5.9)
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.526Z
Updated: 2024-08-02T10:07:06.113Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.