PT-2023-23218 · Softether · Softether Vpn

Lilith >_> · CVE-2023-31192 · Publicado 2023-10-12 · Atualizado 2025-12-19

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftEther VPN version 5.01.9674

Description An information disclosure issue exists in the ClientConnect() functionality. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this issue.

Recommendations For SoftEther VPN version 5.01.9674, consider disabling the ClientConnect() functionality until a patch is available to prevent exploitation. Restrict access to sensitive information and network packets to minimize the risk of information disclosure.

Exploit

Correção

Use of Uninitialized Resource

Enumeração de Fraquezas

CWE-908

CWE-457

Identificadores relacionados

CVE-2023-31192

Produtos afetados

Softether Vpn

Referências · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1768 · Exploit
• https://twitter.com/lovithreatintel/status/2001528614303797653 · Publicação no Twitter
• https://t.me/cibsecurity/72187 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-31192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-31192 · Nota de Segurança
• https://softether.org/9-about/News/904-SEVPN202301 · Aviso do Fabricante
• https://twitter.com/lovithreatintel/status/2002059003309011048 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1712543107248509140 · Publicação no Twitter