High severity7.8NVD Advisory· Published Oct 12, 2023· Updated Jun 17, 2026
CVE-2023-32634
CVE-2023-32634
Description
An authentication bypass vulnerability exists in the CiRpcServerThread() functionality of SoftEther VPN 5.01.9674 and 4.41-9782-beta. An attacker can perform a local man-in-the-middle attack to trigger this vulnerability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
55.01.9674 and 4.41-9782-beta+ 2 more
- (no CPE)range: 5.01.9674 and 4.41-9782-beta
- cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*
- cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*
- Range: 5.01.9674 and 4.41-9782-beta
- SoftEther VPN/SoftEther VPNv5Range: 4.41-9782-beta
Patches
Vulnerability mechanics
References
3- www.softether.org/9-about/News/904-SEVPN202301nvdPatchVendor Advisory
- talosintelligence.com/vulnerability_reports/TALOS-2023-1755nvdExploitThird Party Advisory
- www.talosintelligence.com/vulnerability_reports/TALOS-2023-1755nvd
News mentions
0No linked articles in our index yet.