CVE-2014-9755: Viprinet Multichannel VPN Router 300 Firmware

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity (through the checking of the endpoint's SSL key) before initiating the exchange, which allows remote attackers to perform a replay attack.

Affected products

• Viprinet Multichannel VPN Router 300 Firmware: version 2013070830 only; version 2013080900 only

Published 2017-01-20. Last modified 2026-06-17.