CVE-2025-2704CWE-754

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying…

High · published April 2, 2025

CVSS v3.1
7.5
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00826 · 57.0th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2025-04-02T21:00Z
EPSS history
Timeline
  • 02 APR 21:00Z
    OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying…
    cvelistv5