CVE-2019-11868

Name of the Vulnerable Software and Affected Versions SoftEther VPN Server versions up to 4.29 See.sys up to version 4.25

Description The issue allows a user to call an IOCTL, specifying any kernel address to which arbitrary bytes are written. This can potentially lead to unauthorized access and modification of kernel memory.

Recommendations For SoftEther VPN Server versions up to 4.29, update See.sys to a version newer than 4.25 to resolve the issue. For See.sys up to version 4.25, consider restricting access to the IOCTL function until a patch is available.