CVE-2024-24974

2024-07-0810:20:34

CWE-923

OpenVPN

github.com

openvpn

vulnerability

interactive service

AI Score

6.8

Confidence

High

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:openvpn:openvpn:*:*:*:*:*:*:*:*"
    ],
    "vendor": "openvpn",
    "product": "openvpn",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.5.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "cpes": [
      "cpe:2.3:a:openvpn:openvpn:2.6.0:-:*:*:community:*:*:*"
    ],
    "vendor": "openvpn",
    "product": "openvpn",
    "versions": [
      {
        "status": "affected",
        "version": "2.6.0",
        "lessThan": "2.6.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]