CVE-2023-32275

Name of the Vulnerable Software and Affected Versions SoftEther VPN versions 4.41-9782-beta through 5.01.9674

Description An information disclosure issue exists in the CtEnumCa() functionality. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this issue.

Recommendations For versions 4.41-9782-beta through 5.01.9674, as a temporary workaround, consider restricting access to the CtEnumCa() functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.