📦

ovpn-dco-win

Vendor: openvpn

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 4 Total Indexed
Avg. EPSS 0.18% Exploit Prob.
Latest CVE CVE-2025-50054 Jun 20

Security Vulnerability Index

Page 1 / 1
5.5 CVSS
CVE-2025-50054

Buffer overflow in OpenVPN ovpn-dco-win version 1.3.0 and earlier and version 2.5.8 and earlier allows a local user process to send a too large control message buffer to the kernel driver resulting in a system crash

EPSS: 0.23%
3.3 CVSS
CVE-2024-5198

OpenVPN ovpn-dco for Windows version 1.1.1 allows an unprivileged local attacker to send I/O control messages with invalid data to the driver resulting in a NULL pointer dereference leading to a system halt.

EPSS: 0.14%