What’s Vulnerable › Vulnerabilities

CVE-2021-31605

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-09-27 · updated 2026-06-17
• Weakness: CWE-78

Description

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.

Affected products

• Openvpn-Monitor Project Openvpn-Monitor: through 1.1.3

References

• http://packetstormsecurity.com/files/164278/OpenVPN-Monitor-1.1.3-Command-Injection.html
• https://github.com/furlongm/openvpn-monitor/releases
• http://packetstormsecurity.com/files/164278/OpenVPN-Monitor-1.1.3-Command-Injection.html
• https://github.com/furlongm/openvpn-monitor/releases

Get alerted when CVE-2021-31605 or the next vulnerability affects your stack