2 matches found
CVE-2018-7544
A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive...
9.1CVSS8.9AI score0.01835EPSS
SaveExploits1References1
CVE-2018-7544: Use of Externally-Controlled Format String
A cross-protocol scripting issue was discovered in the management interface in OpenVPN through 2.4.5. When this interface is enabled over TCP without a password, and when no other clients are connected to this interface, attackers can execute arbitrary management commands, obtain sensitive...
9.1CVSS7.3AI score0.01835EPSS
SaveExploits1References2
20