CVE-2023-32634

HIGH Year: 2023
CVSS v3 Score
7.4
High
Weakness Type
CWE-300
View all →

Vulnerability Description

An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.

Related Vulnerabilities

CVE-2017-12150

HIGH
CVSS:7.4(High)

It was found that samba before 4.4.16, 4.5.x before 4.5.14, and 4.6.x before 4.6.8 did not enforce "SMB signing" when certain configuration options were enabled. A remote attacker could launch a man-i...

CWE-3002017

CVE-2017-12151

HIGH
CVSS:7.4(High)

A flaw was found in the way samba client before samba 4.4.16, samba 4.5.14 and samba 4.6.8 used encryption with the max protocol set as SMB3. The connection could lose the requirement for signing and ...

CWE-3002017

CVE-2017-12735

HIGH
CVSS:7.4(High)

A vulnerability has been identified in LOGO! 8 BM (incl. SIPLUS variants) (All versions < V8.3). An attacker who performs a Man-in-the-Middle attack between the LOGO! BM and other devices could potent...

CWE-3002017

CVE-2017-15086

HIGH
CVSS:7.4(High)

It was discovered that the fix for CVE-2017-12151 was not properly shipped in erratum RHSA-2017:2858 for Red Hat Gluster Storage 3.3 for RHEL 6.

CWE-3002017

CVE-2017-6870

HIGH
CVSS:7.4(High)

A vulnerability was discovered in Siemens SIMATIC WinCC Sm@rtClient for Android (All versions before V1.0.2.2). The existing TLS protocol implementation could allow an attacker to read and modify data...

CWE-3002017

CVE-2017-9941

HIGH
CVSS:7.4(High)

A vulnerability was discovered in Siemens SiPass integrated (All versions before V2.70) that could allow an attacker in a Man-in-the-Middle position between the SiPass integrated server and SiPass int...

CWE-3002017