CVE-2025-25566

CVSS 3.1 Score 5.6 of 10 (medium)

Details

Published Mar 12, 2025
Updated: Apr 2, 2025
CWE ID 401

Summary

CVE-2025-25566 is a memory leak vulnerability affecting SoftEtherVPN version 5.02.5187. An attacker can exploit this issue by triggering the UnixMemoryAlloc function to leak memory, leading to a denial of service condition. The vulnerability does not allow for remote code execution or data theft but can cause significant performance degradation or even crash the VPN server. Users are advised to update to the latest SoftEtherVPN version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • SoftEther VPN

Affected Vendors

  • SoftEther Corporation

Advisories, Assessments, and Mitigations