CVE-2023-27516 - OpenCVE

An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Softether	Vpn

Configuration 1 [-]

OR	cpe:2.3:a:softether:vpn:4.41-9782:beta::::::
	cpe:2.3:a:softether:vpn:5.01.9674:::::::*

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1754	Exploit Third Party Advisory
https://www.softether.org/9-about/News/904-SEVPN202301	Patch Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: talos

Published: 2023-10-12T15:27:52.223Z

Updated: 2023-10-12T17:00:07.942Z

Reserved: 2023-06-02T14:34:05.095Z

Link: CVE-2023-27516

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-10-12T16:15:11.670

Modified: 2023-10-18T16:35:39.283

Link: CVE-2023-27516

JSON object: View

Redhat Information

No data.

CWE

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*", "matchCriteriaId": "79C47EE5-1B55-4FDD-A5B5-E10FF3337100", "vulnerable": true}, {"criteria": "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*", "matchCriteriaId": "5CF5CF13-B22F-494B-BDC0-B59371979251", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An authentication bypass vulnerability exists in the CiRpcAccepted() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. A specially crafted network packet can lead to unauthorized access. An attacker can send a network request to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de omisi\u00f3n de autenticaci\u00f3n en la funcionalidad CiRpcAccepted() de SoftEther VPN 4.41-9782-beta y 5.01.9674. Un paquete de red especialmente manipulado puede provocar un acceso no autorizado. Un atacante puede enviar una solicitud de red para desencadenar esta vulnerabilidad."}], "id": "CVE-2023-27516", "lastModified": "2023-10-18T16:35:39.283", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 4.7, "source": "talos-cna@cisco.com", "type": "Secondary"}]}, "published": "2023-10-12T16:15:11.670", "references": [{"source": "talos-cna@cisco.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1754"}, {"source": "talos-cna@cisco.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.softether.org/9-about/News/904-SEVPN202301"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-1188"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-453"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}