Description
OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | OpenVPN 2 | 2.6.9 and earlier | — |
Advisories 4
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- ICSA-25-072-10 Siemens SINEMA Remote Connect Client CISA ICS & IT advisories · Mar 11, 2025
- SSA-615740 SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3 Siemens ProductCERT · Mar 11, 2025
- WID-SEC-2024-0688 OpenVPN: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 24, 2024