CVE-2021-45035

—

CVSS 3.1

5.9 medium

EPSS

<1%p33

Published

Sep 23, 2022 (Sep 23, 2022)

Modified

Jun 17, 2026

Description

Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.

Vendors: velneo
Products: vclient
Weakness: CWE-287, CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.4%)

In the news0 stories

No ingested article mentions this CVE yet.