CVE-2014-9754

CVE-2014-9754 describes a critical vulnerability in the Viprinet MultichannelVPN Router 300 firmware (versions 2013070830/2013080900) where the hardware VPN client fails to validate the remote VPN endpoint's SSL key. This oversight enables a Man-in-the-Middle (MitM) attack, allowing an attacker to intercept and potentially manipulate VPN traffic. Rated Medium severity (CVSS 5.9), the vulnerability is network-exploitable with high attack complexity and high impact on integrity, but no impact on confidentiality or availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat profile.