CVE-2020-7224

Katalog CVE

CVSS 9.8 · Critical EPSS 2,3%

Kerentanan pada aviatrix openvpn. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Rincian

Terbit di NVD

16 April 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

2,3% peluang dieksploitasi; lebih tinggi dari 82,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.aviatrix.com/#security-bulletin advisory vendor
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html advisory vendor
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001 advisory vendor