What’s Vulnerable › Vulnerabilities

CVE-2020-7224

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-04-16 · updated 2026-06-17

Description

The Aviatrix OpenVPN client through 2.5.7 on Linux, macOS, and Windows is vulnerable when OpenSSL parameters are altered from the issued value set; the parameters could allow unauthorized third-party libraries to load.

Affected products

• Aviatrix Openvpn: through 2.5.7

References

• https://docs.aviatrix.com/#security-bulletin
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001
• https://docs.aviatrix.com/#security-bulletin
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html
• https://docs.aviatrix.com/HowTos/security_bulletin_article.html#article-avxsb-00001

Get alerted when CVE-2020-7224 or the next vulnerability affects your stack