2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:H/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.005 Low
EPSS
Percentile
75.8%
It was discovered that OpenVPN incorrectly handled HMAC comparisons when
running in UDP mode. If a remote attacker were able to perform a
machine-in-the-middle attack, this flaw could possibly be used to perform a
plaintext recovery attack.