CVE-2023-32275: Softether VPN

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability.

Affected products

• Softether VPN: version 4.41-9782 only; version 5.01.9674 only

Published 2023-10-12. Last modified 2026-06-17.