CVE-2022-3761

MEDIUM 5.9CVE-2022-3761 · Published 17/10/2023 · updated 17/06/2026

In short

CVE-2022-3761 is a MEDIUM (CVSS 5.9) vulnerability affecting connect (openvpn).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 57.9% of all vulnerabilities.
Fix: update to 3.4.0.3121, 3.4.0.4506 or later.

Package	Affected versions	Patched versions
connect openvpn	`< 3.4.0.3121< 3.4.0.4506`	`3.4.0.31213.4.0.4506`

Description

OpenVPN Connect versions before 3.4.0.4506 (macOS) and OpenVPN Connect before 3.4.0.3100 (Windows) allows man-in-the-middle attackers to intercept configuration profile download requests which contains the users credentials

References

openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log · Release Notes
openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log · Release Notes

More vulnerabilities in connect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

connect

openvpn

< 3.4.0.3121< 3.4.0.4506

3.4.0.31213.4.0.4506

More vulnerabilities in connect

See all →