CVE-2021-3613

—

CVSS 3.1

7.8 high

EPSS

<1%p54

Published

Jul 2, 2021 (Jul 2, 2021)

Modified

Jun 17, 2026

Description

OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (OpenVPNConnect.exe).

Vendors: openvpn
Products: connect
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.