cve.bz

CVE-2023-27516

7.8 highEPSS 0.5%

High (7.8) in softether vpn. EPSS 0.5% chance of exploitation in the next 30 days.

An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability.

Severity

CVSS 3.1

7.8 high
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWEs
CWE-1188, CWE-453
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON