VULNERABILITY INTELLIGENCE
CVE-2021-45035
CVSS score6.3 MEDIUM
EPSS probability0.46%
CISA KEVNot currently listed
Published2022-09-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N
Description
Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.
Weakness classification
- cve-coordination@incibe.es: CWE-287
- nvd@nist.gov: CWE-295
Primary references
- cve-coordination@incibe.es — Vendor Advisory
- cve-coordination@incibe.es — Vendor Advisory
- cve-coordination@incibe.es — Third Party Advisory
- cve-coordination@incibe.es — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory