CVE-2020-36382

HIGH

OpenVPN Access Server 2.7.3-2.8.7 - Denial of Service via Incorrect Authentication Token Data

Title source: llm
STIX 2.1

Description

OpenVPN Access Server 2.7.3 to 2.8.7 allows remote attackers to trigger an assert during the user authentication phase via incorrect authentication token data in an early phase of the user authentication resulting in a denial of service.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0189
EPSS Percentile 77.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-617 CWE-754
Status published
Products (1)
openvpn/openvpn_access_server 2.7.3 - 2.8.7
Published Jun 04, 2021
Tracked Since Feb 18, 2026