CVE-2023-22325

Published: Oct 12, 2023Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected (3)

Products: Softether: Vpn

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Softether Vpn	Version 4.41-9782 beta
Softether Vpn	Version 5.01.9674
Softether Vpn	Version 5.02

Related CWEs

Loop with Unreachable Exit Condition ('Infinite Loop')

The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.

References (5)

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736

Source: talos-cna@cisco.com

ExploitThird Party Advisory

https://www.softether.org/9-about/News/904-SEVPN202301

Source: talos-cna@cisco.com

PatchVendor Advisory

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.softether.org/9-about/News/904-SEVPN202301

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1736

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.