Skip to content
Sign in
Not rated

CVE-2021-3613 OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL…

Description

OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (OpenVPNConnect.exe).

Affected products and versions

Product Affected versions Fixed in
OpenVPN Connect Versions not published

Other CVEs of OpenVPN Connect

The 2 CVEs of OpenVPN Connect →
CVE-2020-15075 OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical files it should not have… Not rated
Track this CVE