Vulnerability-Lookup

CVE-2023-32634 (GCVE-0-2023-32634)

Vulnerability from cvelistv5 – Published: 2023-10-12 15:27 – Updated: 2025-11-04 19:16

Summary

An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: poc Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-17 18:23 UTC

CWE

CWE-300 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')

Assigner

talos CNA under the mitre root

CNA scorecard C 61/100 over 47 records in the last 180 days details

References

3 references

URL	Tags
https://talosintelligence.com/vulnerability_repor…
https://www.softether.org/9-about/News/904-SEVPN202301
https://www.talosintelligence.com/vulnerability_r…

Impacted products

3 products

Vendor	Product	Version	CPE status
SoftEther VPN	SoftEther VPN	Affected: 4.41-9782-beta Affected: 5.01.9674	guessed
softether	vpn	Affected: 4.41-9782 cpe:2.3:a:softether:vpn:4.41-9782:beta::::::
softether	vpn	Affected: 5.01.9674 cpe:2.3:a:softether:vpn:5.01.9674:::::::*

Credits

Discovered by Lilith >_> of Cisco Talos.

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-04T19:16:23.506Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
            "tags": [
              "x_transferred"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          },
          {
            "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
          },
          {
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "cpes": [
              "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vpn",
            "vendor": "softether",
            "versions": [
              {
                "status": "affected",
                "version": "4.41-9782"
              }
            ]
          },
          {
            "cpes": [
              "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"
            ],
            "defaultStatus": "unknown",
            "product": "vpn",
            "vendor": "softether",
            "versions": [
              {
                "status": "affected",
                "version": "5.01.9674"
              }
            ]
          }
        ],
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32634",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T18:23:15.009192Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-17T18:25:53.739Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "SoftEther VPN",
          "vendor": "SoftEther VPN",
          "versions": [
            {
              "status": "affected",
              "version": "4.41-9782-beta"
            },
            {
              "status": "affected",
              "version": "5.01.9674"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Discovered by Lilith \u0026gt;_\u0026gt; of Cisco Talos."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-300",
              "description": "CWE-300: Channel Accessible by Non-Endpoint (\u0027Man-in-the-Middle\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-10-12T17:00:07.639Z",
        "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "shortName": "talos"
      },
      "references": [
        {
          "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
          "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
        },
        {
          "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
          "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
    "assignerShortName": "talos",
    "cveId": "CVE-2023-32634",
    "datePublished": "2023-10-12T15:27:51.751Z",
    "dateReserved": "2023-06-02T14:34:08.115Z",
    "dateUpdated": "2025-11-04T19:16:23.506Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2023-32634",
      "date": "2026-10-30",
      "epss": "0.00426",
      "percentile": "0.36899"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "SoftEther VPN",
                "vendor": "SoftEther VPN",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.41-9782-beta"
                  },
                  {
                    "status": "affected",
                    "version": "5.01.9674"
                  }
                ]
              }
            ],
            "source": "talos-cna@cisco.com"
          },
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vpn",
                "vendor": "softether",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.41-9782"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vpn",
                "vendor": "softether",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.01.9674"
                  }
                ]
              }
            ],
            "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*",
                    "matchCriteriaId": "79C47EE5-1B55-4FDD-A5B5-E10FF3337100",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*",
                    "matchCriteriaId": "5CF5CF13-B22F-494B-BDC0-B59371979251",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
          },
          {
            "lang": "es",
            "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en la funcionalidad CiRpcServerThread() de SoftEther VPN 5.01.9674 y 4.41-9782-beta. Un atacante puede realizar un ataque de intermediario local para desencadenar esta vulnerabilidad."
          }
        ],
        "id": "CVE-2023-32634",
        "lastModified": "2026-06-17T05:59:16.537",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 5.9,
              "source": "talos-cna@cisco.com",
              "type": "Secondary"
            },
            {
              "cvssData": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.4,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 1.4,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2023-32634",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-17T18:23:15.009192Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2023-10-12T16:15:11.920",
        "references": [
          {
            "source": "talos-cna@cisco.com",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          },
          {
            "source": "talos-cna@cisco.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit",
              "Third Party Advisory"
            ],
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          }
        ],
        "sourceIdentifier": "talos-cna@cisco.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-300"
              }
            ],
            "source": "talos-cna@cisco.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-29T00:08:17+00:00",
      "cve": "CVE-2023-32634",
      "id": "CVE-2023-32634",
      "initial_release_date": "2023-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2023-32634",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2023/cve-2023-32634.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2025-11-04T19:16:23.506Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
              },
              {
                "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
              },
              {
                "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "affected": [
              {
                "cpes": [
                  "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vpn",
                "vendor": "softether",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.41-9782"
                  }
                ]
              },
              {
                "cpes": [
                  "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"
                ],
                "defaultStatus": "unknown",
                "product": "vpn",
                "vendor": "softether",
                "versions": [
                  {
                    "status": "affected",
                    "version": "5.01.9674"
                  }
                ]
              }
            ],
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-32634",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-17T18:23:15.009192Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-17T18:25:49.528Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "SoftEther VPN",
              "vendor": "SoftEther VPN",
              "versions": [
                {
                  "status": "affected",
                  "version": "4.41-9782-beta"
                },
                {
                  "status": "affected",
                  "version": "5.01.9674"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "value": "Discovered by Lilith \u0026gt;_\u0026gt; of Cisco Talos."
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7.8,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                "version": "3.1"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-300",
                  "description": "CWE-300: Channel Accessible by Non-Endpoint (\u0027Man-in-the-Middle\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-10-12T17:00:07.639Z",
            "orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
            "shortName": "talos"
          },
          "references": [
            {
              "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
              "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
            },
            {
              "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
              "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b",
        "assignerShortName": "talos",
        "cveId": "CVE-2023-32634",
        "datePublished": "2023-10-12T15:27:51.751Z",
        "dateReserved": "2023-06-02T14:34:08.115Z",
        "dateUpdated": "2025-11-04T19:16:23.506Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2023-32634

Vulnerability from fkie_nvd - Published: 2023-10-12 16:15 - Updated: 2026-06-17 05:59

Severity

7.8 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.4 (High) - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

URL	Tags
talos-cna@cisco.com	https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755	Exploit, Third Party Advisory
talos-cna@cisco.com	https://www.softether.org/9-about/News/904-SEVPN202301	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755	Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.softether.org/9-about/News/904-SEVPN202301	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755

Impacted products

	Vendor	Product	Version
	softether	vpn	4.41-9782
	softether	vpn	5.01.9674

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "SoftEther VPN",
          "vendor": "SoftEther VPN",
          "versions": [
            {
              "status": "affected",
              "version": "4.41-9782-beta"
            },
            {
              "status": "affected",
              "version": "5.01.9674"
            }
          ]
        }
      ],
      "source": "talos-cna@cisco.com"
    },
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "vpn",
          "vendor": "softether",
          "versions": [
            {
              "status": "affected",
              "version": "4.41-9782"
            }
          ]
        },
        {
          "cpes": [
            "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"
          ],
          "defaultStatus": "unknown",
          "product": "vpn",
          "vendor": "softether",
          "versions": [
            {
              "status": "affected",
              "version": "5.01.9674"
            }
          ]
        }
      ],
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*",
              "matchCriteriaId": "79C47EE5-1B55-4FDD-A5B5-E10FF3337100",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*",
              "matchCriteriaId": "5CF5CF13-B22F-494B-BDC0-B59371979251",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en la funcionalidad CiRpcServerThread() de SoftEther VPN 5.01.9674 y 4.41-9782-beta. Un atacante puede realizar un ataque de intermediario local para desencadenar esta vulnerabilidad."
    }
  ],
  "id": "CVE-2023-32634",
  "lastModified": "2026-06-17T05:59:16.537",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9,
        "source": "talos-cna@cisco.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 7.4,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.4,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-32634",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2024-09-17T18:23:15.009192Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2023-10-12T16:15:11.920",
  "references": [
    {
      "source": "talos-cna@cisco.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
    },
    {
      "source": "talos-cna@cisco.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
    }
  ],
  "sourceIdentifier": "talos-cna@cisco.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-300"
        }
      ],
      "source": "talos-cna@cisco.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-Q5MG-3R24-HVX2

Vulnerability from github – Published: 2023-10-12 18:30 – Updated: 2025-11-04 21:30

Details

Severity

7.8 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2023-32634"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-300"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2023-10-12T16:15:11Z",
    "severity": "HIGH"
  },
  "details": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.",
  "id": "GHSA-q5mg-3r24-hvx2",
  "modified": "2025-11-04T21:30:44Z",
  "published": "2023-10-12T18:30:28Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32634"
    },
    {
      "type": "WEB",
      "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
    },
    {
      "type": "WEB",
      "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
    },
    {
      "type": "WEB",
      "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2023-32634

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2023-32634

Aliases

CVE-2023-32634

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2023-32634",
    "id": "GSD-2023-32634"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2023-32634"
      ],
      "details": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.",
      "id": "GSD-2023-32634",
      "modified": "2023-12-13T01:20:23.676292Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "talos-cna@cisco.com",
        "ID": "CVE-2023-32634",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "SoftEther VPN",
                    "version": {
                      "version_data": [
                        {
                          "version_affected": "=",
                          "version_value": "4.41-9782-beta"
                        },
                        {
                          "version_affected": "=",
                          "version_value": "5.01.9674"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "SoftEther VPN"
            }
          ]
        }
      },
      "credits": [
        {
          "lang": "en",
          "value": "Discovered by Lilith \u0026gt;_\u0026gt; of Cisco Talos."
        }
      ],
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
          }
        ]
      },
      "impact": {
        "cvss": [
          {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "cweId": "CWE-300",
                "lang": "eng",
                "value": "CWE-300: Channel Accessible by Non-Endpoint (\u0027Man-in-the-Middle\u0027)"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
            "refsource": "MISC",
            "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
          },
          {
            "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
            "refsource": "MISC",
            "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "talos-cna@cisco.com",
          "ID": "CVE-2023-32634"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "NVD-CWE-Other"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755",
              "refsource": "MISC",
              "tags": [
                "Exploit",
                "Third Party Advisory"
              ],
              "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1755"
            },
            {
              "name": "https://www.softether.org/9-about/News/904-SEVPN202301",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://www.softether.org/9-about/News/904-SEVPN202301"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.4,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2023-10-18T18:56Z",
      "publishedDate": "2023-10-12T16:15Z"
    }
  }
}

JVNDB-2023-000069

Vulnerability from jvndb - Published: 2023-07-03 06:07 - Updated:2024-05-22 08:47

Severity

8.1 (High) - cvssV3_0 - CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

Multiple vulnerabilities in SoftEther VPN and PacketiX VPN

Details

SoftEther VPN provided by University of Tsukuba SoftEther VPN Project and PacketiX VPN provided by SoftEther Corporation contain multiple vulnerabilities listed below in VPN Client function, and Dynamic DNS Client function included in the VPN server.

Heap-based buffer overflow (CWE-122) - CVE-2023-27395
Integer overflow or wraparound (CWE-190) - CVE-2023-22325
Exposure of resource to wrong sphere (CWE-668) - CVE-2023-32275
Improper access control (CWE-284) - CVE-2023-27516
Channel accessible by non-endpoint (CWE-300) - CVE-2023-32634
Use of uninitialized resource (CWE-908) - CVE-2023-31192

Lilith of Cisco Talos of Cisco Systems, Inc., United States of America reported these vulnerabilities to the developer and coordinated. The developer reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

References

Type

URL

	JVN	http://jvn.jp/en/jp/JVN64316789/index.html
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-27395
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-22325
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32275
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-27516
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-31192
	CVE	https://www.cve.org/CVERecord?id=CVE-2023-32634
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-22325
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-27395
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-27516
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-31192
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32275
	NVD	https://nvd.nist.gov/vuln/detail/CVE-2023-32634
	Buffer Errors(CWE-119)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
	Permissions(CWE-264)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html
	No Mapping(CWE-Other)	https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html

Impacted products

Vendor

Product

	SoftEther Corporation	PacketiX VPN
	University of Tsukuba SoftEther VPN Project	SoftEther VPN

Show details on JVN DB website

JSON

To clipboard

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000069.html",
  "dc:date": "2024-05-22T17:47+09:00",
  "dcterms:issued": "2023-07-03T15:07+09:00",
  "dcterms:modified": "2024-05-22T17:47+09:00",
  "description": "SoftEther VPN provided by University of Tsukuba SoftEther VPN Project and PacketiX VPN provided by SoftEther Corporation contain multiple vulnerabilities listed below in VPN Client function, and Dynamic DNS Client function included in the VPN server.\u003cul\u003e\u003cli\u003eHeap-based buffer overflow (CWE-122) - CVE-2023-27395\u003c/li\u003e\u003cli\u003eInteger overflow or wraparound (CWE-190) - CVE-2023-22325\u003c/li\u003e\u003cli\u003eExposure of resource to wrong sphere (CWE-668) - CVE-2023-32275\u003c/li\u003e\u003cli\u003eImproper access control (CWE-284) - CVE-2023-27516\u003c/li\u003e\u003cli\u003eChannel accessible by non-endpoint (CWE-300) - CVE-2023-32634\u003c/li\u003e\u003cli\u003eUse of uninitialized resource (CWE-908) - CVE-2023-31192\u003c/li\u003e\u003c/ul\u003eLilith of Cisco Talos of Cisco Systems, Inc., United States of America reported these vulnerabilities to the developer and coordinated. The developer reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2023/JVNDB-2023-000069.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:misc:softether_packetix_vpn",
      "@product": "PacketiX VPN",
      "@vendor": "SoftEther Corporation",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:softether:vpn",
      "@product": "SoftEther VPN",
      "@vendor": "University of Tsukuba SoftEther VPN Project",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "5.1",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:H/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "8.1",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2023-000069",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN64316789/index.html",
      "@id": "JVN#64316789",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-27395",
      "@id": "CVE-2023-27395",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-22325",
      "@id": "CVE-2023-22325",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32275",
      "@id": "CVE-2023-32275",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-27516",
      "@id": "CVE-2023-27516",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-31192",
      "@id": "CVE-2023-31192",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2023-32634",
      "@id": "CVE-2023-32634",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-22325",
      "@id": "CVE-2023-22325",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-27395",
      "@id": "CVE-2023-27395",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-27516",
      "@id": "CVE-2023-27516",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-31192",
      "@id": "CVE-2023-31192",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32275",
      "@id": "CVE-2023-32275",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2023-32634",
      "@id": "CVE-2023-32634",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-119",
      "@title": "Buffer Errors(CWE-119)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-264",
      "@title": "Permissions(CWE-264)"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Multiple vulnerabilities in SoftEther VPN and PacketiX VPN"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2023-32634 (GCVE-0-2023-32634)

FKIE_CVE-2023-32634

GHSA-Q5MG-3R24-HVX2

GSD-2023-32634

JVNDB-2023-000069

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour