CVE-2021-31605

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket

published September 27, 2021

CVSS
—
EPSS
3%
Percentile
88.6
In the wild
Unconfirmed
What it is

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03341 · 88.6th percentile
Published
2021-09-27T05:35Z
EPSS history
Timeline
  • 27 SEP 05:35Z
    furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket
    cvelistv5