Approved changes feed: RSS · Atom

cpe:2.3:a:softether_vpn:softether_vpn:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSoftether Vpn (f8bd1a5b-a8f3-5e8c-b8c8-12814b772898)
ProductSoftether Vpn (e0d69bcd-8fb0-5052-a230-c221d1937c89)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-32634 vulnerable 2026-06-08 06:04:46.666729 Details available
HIGH (7.8)
An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:51.751Z
Updated: 2025-11-04T19:16:23.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32275 vulnerable 2026-06-08 06:04:45.317966 Details available
MEDIUM (5.5)
An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.
Published: 2023-10-12T15:27:52.706Z
Updated: 2025-11-04T19:16:04.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31192 vulnerable 2026-06-08 06:04:42.147331 Details available
MEDIUM (5.3)
An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:51.300Z
Updated: 2025-11-04T19:15:58.051Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27516 vulnerable 2026-06-08 05:57:41.772933 Details available
HIGH (7.3)
An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability.
Published: 2023-10-12T15:27:52.223Z
Updated: 2024-08-02T12:16:36.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-27395 vulnerable 2026-06-08 05:57:41.132473 Details available
CRITICAL (9)
A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.
Published: 2023-10-12T15:27:54.988Z
Updated: 2024-08-02T12:09:43.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25774 vulnerable 2026-06-08 05:56:10.596179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23581 vulnerable 2026-06-08 05:56:03.368304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22325 vulnerable 2026-06-08 05:54:23.719916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22308 vulnerable 2026-06-08 05:54:23.622780 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.