CVE-2021-45035: Velneo vClient Improper authentication
Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-45035?
CVE-2021-45035 refers to a vulnerability in Velneo vClient version 28.1.3 where the certificate of authenticity is not correctly checked by default, potentially allowing an attacker to perform a MITM attack and obtain user credentials.
How does CVE-2021-45035 affect Velneo vClient?
CVE-2021-45035 affects Velneo vClient version 28.1.3 by not correctly checking the certificate of authenticity, enabling a possible MITM attack.
What is the severity of CVE-2021-45035?
CVE-2021-45035 has a severity rating of medium with a CVSS score of 5.9.
How can an attacker exploit CVE-2021-45035?
An attacker with access to the network can exploit CVE-2021-45035 by performing a MITM attack to intercept and capture user credentials.
How can I fix CVE-2021-45035 in Velneo vClient?
To fix CVE-2021-45035 in Velneo vClient, you should update to a version that includes the certificate of authenticity check or follow the recommendations provided by the vendor.