OpenVPN Access Server 2.9.3

CPE Details

OpenVPN Access Server 2.9.3
openvpn
openvpn_access_server
2.9.3
2021-09-29
15h50 +00:00
2021-09-29
16h40 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:openvpn:openvpn_access_server:2.9.3:*:*:*:*:*:*:*

Informations

Vendor

openvpn

Product

openvpn_access_server

Version

2.9.3

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-4234 2022-07-06 17h10 +00:00 OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.
7.5
High
CVE-2022-33738 2022-07-06 13h10 +00:00 OpenVPN Access Server before 2.11 uses a weak random generator used to create user session token for the web portal
7.5
High
CVE-2021-3824 2021-09-23 12h53 +00:00 OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
6.1
Medium
CVE-2020-15074 2020-07-14 15h27 +00:00 OpenVPN Access Server older than version 2.8.4 and version 2.9.5 generates new user authentication tokens instead of reusing exiting tokens on reconnect making it possible to circumvent the initial token expiry timestamp.
7.5
High