cve.bz

CVE-2023-31192

5.3 mediumEPSS 1.0%

Medium (5.3) in softether vpn. EPSS 1.0% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the ClientConnect() functionality of SoftEther VPN 5.01.9674. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Severity

CVSS 3.1

5.3 medium
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWEs
CWE-908, CWE-457
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON