Openvpn-monitor Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Openvpn-monitor Project records in CISA KEV

No Openvpn-monitor Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2021-11704 CVE-2021-31605 · GHSA-4258-vcjw-wwxx

LOW 39

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03405 Published 2021-09-27 No fix listed CWE-78

TI-2021-11705 CVE-2021-31606 · GHSA-5w5c-3g26-8mmc

LOW 38

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02599 Published 2021-09-27 No fix listed CWE-287

TI-2021-11703 CVE-2021-31604 · GHSA-vw35-c8hf-fwmq

LOW 30

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00683 Published 2021-09-27 No fix listed CWE-352