HIGH Published July 8, 2024

CVE-2024-24974

The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.

CVSS base score

7.5 (v3.1)

Severity

HIGH

Attack vector

Network

Weakness

CWE-923

Last modified

November 3, 2026

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

openvpn openvpn

References

community.openvpn.net Vendor Advisory
openvpn.net Vendor Advisory
www.mail-archive.com Mailing List
community.openvpn.net Vendor Advisory
openvpn.net Vendor Advisory
www.mail-archive.com Mailing List

View full NVD advisory →

More openvpn vulnerabilities

Published the same day

← Back to CVE watch

CVE-2024-24974

Affected products

References

More openvpn vulnerabilities

Published the same day

Related reading