CVE-2020-7224

—

CVSS 3.1

9.8 critical

EPSS

2%p82

Published

Apr 16, 2020 (Apr 16, 2020)

Modified

Jun 17, 2026

Description

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Vendors: aviatrix
Products: openvpn
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news0 stories

No ingested article mentions this CVE yet.