CVE-2023-27395

Summary

CVE-2023-27395 is a critical vulnerability affecting SoftEther VPN versions 4.41-9782-beta, 5.01.9674, and 5.02. This issue involves a heap-based buffer overflow in the WpcParsePacket() functionality of the vpnserver component. A maliciously crafted network packet can exploit this flaw, resulting in arbitrary code execution. An attacker can leverage a man-in-the-middle position to trigger this vulnerability, potentially gaining unauthorized access to the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.