CVE-2021-3606

EUVD-2021-26910
OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
openvpnopenvpn
𝑥
< 2.5.3
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
openvpn
bookworm
2.6.3-1+deb12u2
fixed
bookworm (security)
2.6.3-1+deb12u2
fixed
bullseye
2.5.1-3
fixed
sid
2.6.12-1
fixed
trixie
2.6.12-1
fixed
Common Weakness Enumeration
References
https://community.openvpn.net/openvpn/wiki/CVE-2021-3606
https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
https://community.openvpn.net/openvpn/wiki/CVE-2021-3606
https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements