CVE-2023-25774
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-25774 is a denial-of-service vulnerability in the vpnserver ConnectionAccept() functionality of SoftEther VPN 5.02. This vulnerability affects the affected product tzul2S. It can be exploited by an attacker sending a sequence of specially crafted network connections, leading to denial of service. The base severity of this vulnerability is rated as HIGH, with a base score of 7.5 according to [email protected]. The exploitability score is 3.9, indicating it is moderately easy to exploit. It does not require any privileges or user interaction and can be triggered remotely over the network. The impact score is 3.6, suggesting potential disruption to availability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions