CVE-2023-22325: Softether VPN

Medium severity, CVSS 5.9. EPSS: 1% chance of exploitation in the next 30 days.

A denial of service vulnerability exists in the DCRegister DDNS_RPC_MAX_RECV_SIZE functionality of SoftEther VPN 4.41-9782-beta, 5.01.9674 and 5.02. A specially crafted network packet can lead to denial of service. An attacker can perform a man-in-the-middle attack to trigger this vulnerability.

Affected products

• Softether VPN: version 4.41-9782 only; version 5.01.9674 only; version 5.02 only

Published 2023-10-12. Last modified 2026-06-17.