CVE-2021-31605 is a command injection vulnerability in furlongm openvpn-monitor versions through 1.1.3, allowing an attacker to shut down the OpenVPN server via the management interface socket. Rated 7.5 HIGH on CVSS, it has a low attack complexity and requires no user interaction, leading to high availability impact. While no public exploits, Metasploit modules, or community discussions are currently identified, its nature as a command injection vulnerability (CWE-78) warrants attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.1.3CPE matchmatch criteria | cpe:2.3:a:openvpn-monitor_project:openvpn-monitor:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.