Openvpn Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Product

OpenVPN Access Server8
OpenVPN Core Library2
OpenVPN Private Tunnel Installer2
OpenVPN Connect2

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Remediation

Official Fix8
Temporary Fix0
Workaround0
Unavailable0
Not Defined6

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploitability

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined14

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Access Vector

Not Defined0
Physical0
Local0
Adjacent2
Network12

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Authentication

Not Defined0
High0
Low6
None8

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

User Interaction

Not Defined0
Required4
None10

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

C3BM Index

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤62
≤76
≤82
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤52
≤62
≤76
≤82
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

VulDB

≤10
≤20
≤30
≤44
≤50
≤64
≤74
≤82
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

NVD

≤10
≤20
≤30
≤40
≤50
≤60
≤72
≤84
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit 0-day

<1k2
<2k10
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Today

<1k12
<2k2
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Exploit Market Volume

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

🔴 CTI Activities

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Affected Products (4): Access Server (11), Connect (1), Core Library (1), Private Tunnel Installer (1)

PublishedBaseTempVulnerabilityProdExpRemCTIEPSSCVE
07/07/20225.65.5OpenVPN Access Server Web Portal entropyNetwork Encryption SoftwareNot DefinedOfficial Fix0.000.00132CVE-2022-33738
07/07/20225.55.5OpenVPN Access Server incorrect ownership assignmentNetwork Encryption SoftwareNot DefinedNot Defined0.040.00132CVE-2022-33737
07/07/20226.46.4OpenVPN Access Server amplificationNetwork Encryption SoftwareNot DefinedNot Defined0.020.00078CVE-2021-4234
09/24/20214.84.7OpenVPN Access Server Web Login Page injectionNetwork Encryption SoftwareNot DefinedOfficial Fix0.070.00104CVE-2021-3824
07/12/20213.73.6OpenVPN Core Library Server Certificate certificate validationNetwork Encryption SoftwareNot DefinedOfficial Fix0.020.00091CVE-2021-3547
07/03/20216.36.3OpenVPN Connect OpenSSL Configuration File OpenVPNConnect.exe uncontrolled search pathNetwork Encryption SoftwareNot DefinedNot Defined0.030.00059CVE-2021-3613
06/04/20214.34.3OpenVPN Access Server Authentication Token unusual conditionNetwork Encryption SoftwareNot DefinedNot Defined0.030.00174CVE-2020-36382
06/04/20214.34.3OpenVPN Access Server Control Channel Data authentication bypassNetwork Encryption SoftwareNot DefinedNot Defined0.030.00095CVE-2020-15077
05/27/20215.55.3OpenVPN Private Tunnel Installer tmp symlinkNetwork Encryption SoftwareNot DefinedOfficial Fix0.030.00044CVE-2020-15076
07/14/20207.47.1OpenVPN Access Server User Authentication Token authentication bypass by assumed-immutable dataNetwork Encryption SoftwareNot DefinedOfficial Fix0.060.00084CVE-2020-15074

4 more entries are not shown

Interested in the pricing of exploits?

See the underground prices here!