CVE-2014-9754

The CVE-2014-9754 entry concerns Viprinet MultichannelVPN Router 300, specifically firmware versions 2013070830/2013080900. The issue is that the hardware VPN client does not validate the remote VPN endpoint identity (the SSL key) before starting the exchange, enabling a Man-in-the-Middle attack....