CVE-2023-27395

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

A heap-based buffer overflow vulnerability exists in the vpnserver WpcParsePacket() functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to arbitrary code execution. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-122CWE-787

Affected software

VendorProductVersions
SoftEther VPNSoftEther VPN4.41-9782-beta; 5.01.9674; 5.02
softether_vpnsoftether_vpn4.41-9782-beta; 5.01.9674; 5.02

References

Timeline

Published
Oct 12, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-273969.8FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation)CVE-2023-273979.8Unrestricted upload of file with dangerous type exists in MicroEngine Mailform version 1.1.0 to 1.1.8. If the product's file upload functionCVE-2023-273987.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of CVE-2023-273997.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of CVE-2023-27406.1A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue iCVE-2023-274007.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of CVE-2023-274017.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of CVE-2023-274027.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of CVE-2023-274037.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory cCVE-2023-274047.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stCVE-2023-274057.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of CVE-2023-274067.8A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to st
CVE-2023-27395: High severity, CVSS 8.1 | Vulnix