What’s Vulnerable › Vulnerabilities

CVE-2024-45750

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-25 · updated 2026-06-17
• Weakness: CWE-287

Description

An issue in TheGreenBow Windows Standard VPN Client 6.87.108 (and older), Windows Enterprise VPN Client 6.87.109 (and older), Windows Enterprise VPN Client 7.5.007 (and older), Android VPN Client 6.4.5 (and older) VPN Client Linux 3.4 (and older), VPN Client MacOS 2.4.10 (and older) allows a remote attacker to execute arbitrary code via the IKEv2 Authentication phase, it accepts malformed ECDSA signatures and establishes the tunnel.

Affected products

• TheGreenBow Android Vpn: through 6.4.5
• TheGreenBow Vpn Client Linux: through 3.4
• TheGreenBow Vpn Client Macos: through 2.4.10
• TheGreenBow Windows Enterprise Vpn: through 7.5.007
• TheGreenBow Windows Standard Vpn: through 6.87.108

References

• https://thegreenbow.com
• https://www.thegreenbow.com/en/support/security-alerts/#deeplink-17024

Get alerted when CVE-2024-45750 or the next vulnerability affects your stack