Aviatrix Openvpn vulnerabilities

2 vulnerabilities

Known vulnerabilities in Aviatrix Openvpn, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2020-7224alpineopenvpn+1
EPSS score
2.31%
The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.7.5CVE-2020-27569alpineopenvpn+3
EPSS score
0.90%
Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system.