openvpn-monitor vulnerabilities and fixes

Recent CVEs affecting openvpn-monitor, with upgrade or downgrade steps. 3 tracked.

Also searched as: openvpn monitor.

openvpn-monitor has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-09-27. Highest priority: CVE-2021-31606 (score 53/100).

• CVE-2021-31606 HIGH 7.5 UPGRADE furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.
• CVE-2021-31605 HIGH 7.5 UPGRADE furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socke
• CVE-2021-31604 MEDIUM 6.5 UPGRADE furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

FAQ

How do I fix openvpn-monitor vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openvpn-monitor being exploited right now?

None of the tracked openvpn-monitor CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openvpn-monitor CVE should I patch first?

CVE-2021-31606 currently ranks highest (53/100): furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients..

RSS feed for openvpn-monitor · ← Back to latest CVEs