CVE-2023-32275

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-201 CWE-668

Affected software

Vendor	Product	Versions
SoftEther VPN	SoftEther VPN	4.41-9782-beta; 5.01.9674
softether	vpn	4.41-9782
softether	vpn	5.01.9674

References

https://talosintelligence.com/vulnerability_reports/TALOS-2023-1753Exploit, Third Party Advisory
https://www.softether.org/9-about/News/904-SEVPN202301Vendor Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1753Exploit, Third Party Advisory
https://www.softether.org/9-about/News/904-SEVPN202301Vendor Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1753

Timeline

Published: Oct 12, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-322767.8Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead CVE-2023-322776.1Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticated user to potential CVE-2023-322787.3Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver i CVE-2023-322797.5Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthent CVE-2023-32285.7Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.CVE-2023-322805.3Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated CVE-2023-322817.8The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-CVE-2023-322827.2Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via l CVE-2023-322835.5Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authe CVE-2023-322849.8An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed CVE-2023-322854.4Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acc CVE-2023-322887.8Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to info