VULNERABILITY INTELLIGENCE

CVE-2020-36382

CVSS score7.5 HIGH

EPSS probability1.89%

CISA KEVNot currently listed

Published2021-06-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

Weakness classification

security@openvpn.net: CWE-754
nvd@nist.gov: CWE-617

Primary references

security@openvpn.net — Vendor Advisory
security@openvpn.net — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory