NetSight
high7.5

CVE-2021-4234

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the clie…

Impact

OpenVPN Access Server 2.10 and prior versions are susceptible to resending multiple packets in a response to a reset packet sent from the client which the client again does not respond to, resulting in a limited amplification attack.

Affected products

VendorProductAffected versions
OpenvpnOpenvpn Access Server
before 2.11.0

Weakness classification

References