Softethervpn
Approved changes feed: RSS · Atom
cpe:2.3:a:softethervpn:softethervpn:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Softethervpn (f67d187a-22aa-527b-9ceb-35406e5e7c93) |
|---|---|
| Product | Softethervpn (4af63644-3e26-5b7b-8da6-bcacd82550fe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39312 |
vulnerable | 2026-06-08 08:01:16.160523 |
Pre-Auth EAP-TLS DoS on SoftEther VPN Developer Edition
HIGH (7.5)
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. In 5.2.5188 and earlier, a pre-authentication denial-of-service vulnerability exists in SoftEther VPN Developer Edition 5.2.5188 (and likely earlier versions of Developer Edition). An unauthenticated remote attacker can crash the vpnserver process by sending a single malformed EAP-TLS packet over raw L2TP (UDP/1701), terminating all active VPN sessions.
Published: 2026-04-07T16:52:08.172Z
Updated: 2026-04-07T17:27:16.498Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-32787 |
vulnerable | 2026-06-08 07:19:00.852736 |
SoftEtherVPN Affected by NULL dereference in DeleteIPv6DefaultRouterInRA
LOW (3.1)
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. Versions 5.02.5184 to 5.02.5187 are vulnerable to NULL dereference in `DeleteIPv6DefaultRouterInRA` called by `StorePacket`. Before dereferencing, `DeleteIPv6DefaultRouterInRA` does not account for `ParsePacket` returning NULL, resulting in the program crashing. A patched version does not exist at this time.
Published: 2025-04-16T21:41:15.966Z
Updated: 2025-04-17T13:15:18.899Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-38520 |
vulnerable | 2026-06-08 06:41:47.622287 |
SoftEther VPN with L2TP - 2.75x Amplification
MEDIUM (5.3)
SoftEtherVPN is a an open-source cross-platform multi-protocol VPN Program. When SoftEtherVPN is deployed with L2TP enabled on a device, it introduces the possibility of the host being used for amplification/reflection traffic generation because it will respond to every packet with two response packets that are larger than the request packet size. These sorts of techniques are used by external actors who generate spoofed source IPs to target a destination on the internet. This vulnerability has been patched in version 5.02.5185.
Published: 2024-06-26T18:59:25.088Z
Updated: 2024-08-02T04:12:25.267Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.