CVE-2023-22325 - OpenCVE

A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Softether	Vpn

Configuration 1 [-]

OR	cpe:2.3:a:softether:vpn:4.41-9782:beta::::::
	cpe:2.3:a:softether:vpn:5.01.9674:::::::*
	cpe:2.3:a:softether:vpn:5.02:::::::*

No data.

References

Link	Providers
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736
https://www.softether.org/9-about/News/904-SEVPN202301
https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1736

History

No history.

MITRE

Status: PUBLISHED

Assigner: talos

Published: 2023-10-12T15:27:54.526Z

Updated: 2024-08-02T10:07:06.113Z

Reserved: 2023-03-24T14:45:06.682Z

Link: CVE-2023-22325

Vulnrichment

Updated: 2024-08-02T10:07:06.113Z

NVD

Status : Analyzed

Published: 2023-10-12T16:15:10.283

Modified: 2023-10-18T17:12:38.933

Link: CVE-2023-22325

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-22325", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2023-03-24T14:45:06.682Z", "datePublished": "2023-10-12T15:27:54.526Z", "dateUpdated": "2024-08-02T10:07:06.113Z"}, "containers": {"cna": {"affected": [{"vendor": "SoftEther VPN", "product": "SoftEther VPN", "versions": [{"version": "4.41-9782-beta", "status": "affected"}, {"version": "5.01.9674", "status": "affected"}, {"version": "5.02", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')", "type": "CWE", "cweId": "CWE-835"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2023-10-12T17:00:08.927Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736"}, {"url": "https://www.softether.org/9-about/News/904-SEVPN202301", "name": "https://www.softether.org/9-about/News/904-SEVPN202301"}], "credits": [{"lang": "en", "value": "Discovered by Lilith >_> of Cisco Talos."}]}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1736"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "tags": ["x_transferred"]}, {"url": "https://www.softether.org/9-about/News/904-SEVPN202301", "name": "https://www.softether.org/9-about/News/904-SEVPN202301", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:07:06.113Z"}}, {"affected": [{"vendor": "softether", "product": "vpn", "cpes": ["cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.41-9782", "status": "affected"}]}, {"vendor": "softether", "product": "vpn", "cpes": ["cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "5.01.9674", "status": "affected"}]}, {"vendor": "softether", "product": "vpn", "cpes": ["cpe:2.3:a:softether:vpn:5.02:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "5.02", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-07-31T20:32:28.975799Z", "id": "CVE-2023-22325", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-31T20:39:42.379Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1736"}, {"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "tags": ["x_transferred"]}, {"url": "https://www.softether.org/9-about/News/904-SEVPN202301", "name": "https://www.softether.org/9-about/News/904-SEVPN202301", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:07:06.113Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-22325", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-07-31T20:32:28.975799Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*"], "vendor": "softether", "product": "vpn", "versions": [{"status": "affected", "version": "4.41-9782"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*"], "vendor": "softether", "product": "vpn", "versions": [{"status": "affected", "version": "5.01.9674"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:softether:vpn:5.02:*:*:*:*:*:*:*"], "vendor": "softether", "product": "vpn", "versions": [{"status": "affected", "version": "5.02"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-31T20:39:34.112Z"}}], "cna": {"credits": [{"lang": "en", "value": "Discovered by Lilith >_> of Cisco Talos."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "SoftEther VPN", "product": "SoftEther VPN", "versions": [{"status": "affected", "version": "4.41-9782-beta"}, {"status": "affected", "version": "5.01.9674"}, {"status": "affected", "version": "5.02"}]}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736"}, {"url": "https://www.softether.org/9-about/News/904-SEVPN202301", "name": "https://www.softether.org/9-about/News/904-SEVPN202301"}], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-835", "description": "CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2023-10-12T17:00:08.927Z"}}}, "cveMetadata": {"cveId": "CVE-2023-22325", "state": "PUBLISHED", "dateUpdated": "2024-08-02T10:07:06.113Z", "dateReserved": "2023-03-24T14:45:06.682Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2023-10-12T15:27:54.526Z", "assignerShortName": "talos"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:softether:vpn:4.41-9782:beta:*:*:*:*:*:*", "matchCriteriaId": "79C47EE5-1B55-4FDD-A5B5-E10FF3337100", "vulnerable": true}, {"criteria": "cpe:2.3:a:softether:vpn:5.01.9674:*:*:*:*:*:*:*", "matchCriteriaId": "5CF5CF13-B22F-494B-BDC0-B59371979251", "vulnerable": true}, {"criteria": "cpe:2.3:a:softether:vpn:5.02:*:*:*:*:*:*:*", "matchCriteriaId": "D21F370B-D9F2-43E8-8E45-0EA74A3C9D4B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de denegaci\u00f3n de servicio en la funcionalidad DCRegister DDNS_RPC_MAX_RECV_SIZE de SoftEther VPN 4.41-9782-beta, 5.01.9674 y 5.02. Un paquete de red especialmente manipulado puede provocar una Denegaci\u00f3n de Servicio (DoS). Un atacante puede realizar un ataque de intermediario para desencadenar esta vulnerabilidad."}], "id": "CVE-2023-22325", "lastModified": "2023-10-18T17:12:38.933", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.6, "source": "talos-cna@cisco.com", "type": "Secondary"}]}, "published": "2023-10-12T16:15:10.283", "references": [{"source": "talos-cna@cisco.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1736"}, {"source": "talos-cna@cisco.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://www.softether.org/9-about/News/904-SEVPN202301"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-835"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-835"}], "source": "talos-cna@cisco.com", "type": "Secondary"}]}