Search
Find a vulnerability
Search criteria
2 vulnerabilities found for vpn_client_linux by thegreenbow
CVE-2024-45750 (GCVE-0-2024-45750)
Vulnerability from nvd – Published: 2024-09-25 00:00 – Updated: 2024-09-26 19:02
VLAI
EPSS
VEX
Summary
An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-26 18:48 UTC
CWE
- n/a
- CWE-287 - Improper Authentication
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| thegreenbow | android_vpn |
Affected:
0 , ≤ 6.4.5
(custom)
cpe:2.3:a:thegreenbow:android_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | vpn_client_linux |
Affected:
0 , ≤ 3.4
(custom)
cpe:2.3:a:thegreenbow:vpn_client_linux:*:*:*:*:*:*:*:* |
|
| thegreenbow | windows_standard_vpn |
Affected:
0 , ≤ 6.87.108
(custom)
cpe:2.3:a:thegreenbow:windows_standard_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | windows_enterprise_vpn |
Affected:
0 , ≤ 7.5.007
(custom)
cpe:2.3:a:thegreenbow:windows_enterprise_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | vpn_client_macos |
Affected:
0 , ≤ 2.4.10
(custom)
cpe:2.3:a:thegreenbow:vpn_client_macos:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:thegreenbow:android_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "android_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "6.4.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:vpn_client_linux:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "vpn_client_linux",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "3.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:windows_standard_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "windows_standard_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "6.87.108",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:windows_enterprise_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "windows_enterprise_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "7.5.007",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:vpn_client_macos:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "vpn_client_macos",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "2.4.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-45750",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-26T18:48:36.428721Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-26T19:02:46.569Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-25T17:44:35.717Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://thegreenbow.com"
},
{
"url": "https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-45750",
"datePublished": "2024-09-25T00:00:00.000Z",
"dateReserved": "2024-09-06T00:00:00.000Z",
"dateUpdated": "2024-09-26T19:02:46.569Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-45750 (GCVE-0-2024-45750)
Vulnerability from cvelistv5 – Published: 2024-09-25 00:00 – Updated: 2024-09-26 19:02
VLAI
EPSS
VEX
Summary
An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel.
Severity
7.3 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2024-09-26 18:48 UTC
CWE
- n/a
- CWE-287 - Improper Authentication
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| thegreenbow | android_vpn |
Affected:
0 , ≤ 6.4.5
(custom)
cpe:2.3:a:thegreenbow:android_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | vpn_client_linux |
Affected:
0 , ≤ 3.4
(custom)
cpe:2.3:a:thegreenbow:vpn_client_linux:*:*:*:*:*:*:*:* |
|
| thegreenbow | windows_standard_vpn |
Affected:
0 , ≤ 6.87.108
(custom)
cpe:2.3:a:thegreenbow:windows_standard_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | windows_enterprise_vpn |
Affected:
0 , ≤ 7.5.007
(custom)
cpe:2.3:a:thegreenbow:windows_enterprise_vpn:*:*:*:*:*:*:*:* |
|
| thegreenbow | vpn_client_macos |
Affected:
0 , ≤ 2.4.10
(custom)
cpe:2.3:a:thegreenbow:vpn_client_macos:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"affected": [
{
"cpes": [
"cpe:2.3:a:thegreenbow:android_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "android_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "6.4.5",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:vpn_client_linux:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "vpn_client_linux",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "3.4",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:windows_standard_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "windows_standard_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "6.87.108",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:windows_enterprise_vpn:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "windows_enterprise_vpn",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "7.5.007",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:thegreenbow:vpn_client_macos:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "vpn_client_macos",
"vendor": "thegreenbow",
"versions": [
{
"lessThanOrEqual": "2.4.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-45750",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-09-26T18:48:36.428721Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-287",
"description": "CWE-287 Improper Authentication",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-26T19:02:46.569Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-09-25T17:44:35.717Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://thegreenbow.com"
},
{
"url": "https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2024-45750",
"datePublished": "2024-09-25T00:00:00.000Z",
"dateReserved": "2024-09-06T00:00:00.000Z",
"dateUpdated": "2024-09-26T19:02:46.569Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}