PT-2023-23218 · Softether · Softether Vpn

Lilith >_> · Published 2023-10-12 · Updated 2025-12-19 · CVE-2023-31192

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SoftEther VPN version 5.01.9674

Description An information disclosure issue exists in the ClientConnect() functionality. A specially crafted network packet can lead to a disclosure of sensitive information. An attacker can perform a man-in-the-middle attack to trigger this issue.

Recommendations For SoftEther VPN version 5.01.9674, consider disabling the ClientConnect() functionality until a patch is available to prevent exploitation. Restrict access to sensitive information and network packets to minimize the risk of information disclosure.

Exploit

Fix

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

CWE-457

Related Identifiers

CVE-2023-31192

Affected Products

Softether Vpn

References · 8

• 🔥 https://talosintelligence.com/vulnerability_reports/TALOS-2023-1768 · Exploit
• https://osv.dev/vulnerability/CVE-2023-31192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31192 · Security Note
• https://softether.org/9-about/News/904-SEVPN202301 · Vendor Advisory
• https://twitter.com/lovithreatintel/status/2001528614303797653 · Twitter Post
• https://t.me/cibsecurity/72187 · Telegram Post
• https://twitter.com/lovithreatintel/status/2002059003309011048 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1712543107248509140 · Twitter Post