PT-2025-43935 · Thegreenbow · Thegreenbow Vpn

Published 2025-10-27 · Updated 2025-10-27 · CVE-2025-11955

Positive Technologies (AI Summary)

CVSS v4.0

8.2

High

Base vector

AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions TheGreenBow VPN versions 7.5 through 7.6

Description The software does not properly validate OCSP certificates. During the IKEv2 authentication process, the VPN client establishes a tunnel even if an OCSP response is not received or if the OCSP response signature is invalid. OCSP (Online Certificate Status Protocol) is a protocol used to determine the revocation status of digital certificates. IKEv2 (Internet Key Exchange version 2) is a protocol used to set up a security association in the Internet Protocol Security (IPsec) protocol suite.

Recommendations Update TheGreenBow VPN to a version newer than 7.6.

Fix

Weakness Enumeration

CWE-299

Related Identifiers

CVE-2025-11955

Affected Products

Thegreenbow Vpn

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-11955 · Security Note
• https://twitter.com/CVEnew/status/1982774453357682995 · Twitter Post
• https://thegreenbow.com/en/support/security-alerts · Patch, Vendor Advisory
• https://incibe.es/en/incibe-cert/notices/aviso/incorrect-validation-ocsp-certificates-thegreenbow-vpn-client-windows · Note
• https://t.me/CVEtracker/35827 · Telegram Post
• https://t.me/cveNotify/140437 · Telegram Post