Openvpn Connect vulnerabilities

3 vulnerabilities

Known vulnerabilities in Openvpn Connect, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2024-8474openvpnconnect+1
EPSS score
0.53%
OpenVPN Connect before version 3.5.0 can contain the configuration profile's clear-text private key which is logged in the application log, which an unauthorized actor can use to decrypt the VPN traffic7.8CVE-2023-7224openvpnconnect+1
EPSS score
0.24%
OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable7.8CVE-2023-7245openvpnconnect+1
EPSS score
0.32%
The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable