Vulnerability · Published Jun 4, 2021 · Assigned by OpenVPN
CVE-2020-36382
High 7.5
In plain English
A high-severity security flaw in OpenVPN Access Server. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.9% (higher than 80% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.9%top 20.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | OpenVPN Access Server | 2.7.3 to 2.8.7 |
Weakness: CWE-754