VULNERABILITY INTELLIGENCE
CVE-2023-22325
CVSS score5.9 MEDIUM
EPSS probability0.96%
CISA KEVNot currently listed
Published2023-10-12
Last modified2026-06-17
Description
A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.