CVE-2021-27406 PerFact OpenVPN-Client

An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the back-end server into initializing a new open-VPN instance with arbitrary open-VPN configuration. This could result in t...

CVE-2021-27406

CVE-2021-27406 affects PerFact OpenVPN-Client, 1.4.1.0 and earlier. The vulnerability allows an attacker, from any local application, to send the VPN config command to the back-end server, forcing it to initialize a new OpenVPN instance with arbitrary configuration. This can lead to code executio...