CVE-2024-4877: High severity openvpn monitor vulnerability
Published Apr 3, 2025
·Updated
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
Affected Software
3 affected components
OpenVPN OpenVPN>=2.4.0<=2.6.10
All of the following
OpenVPN OpenVPN>=2.4.0<2.6.11
Microsoft Windows
Event History
Apr 3, 2025
CVE Published
via MITRE·03:11 PM
Data Sourced
via MITRE·03:11 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-4877?
CVE-2024-4877 is classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2024-4877?
To fix CVE-2024-4877, upgrade OpenVPN to a version later than 2.6.10.
3
What versions of OpenVPN are affected by CVE-2024-4877?
CVE-2024-4877 affects OpenVPN versions 2.4.0 through 2.6.10.
4
What are the implications of CVE-2024-4877?
CVE-2024-4877 allows an external process to escalate privileges by exploiting the OpenVPN GUI component on Windows.
5
Is CVE-2024-4877 specific to any operating system?
Yes, CVE-2024-4877 specifically affects OpenVPN on Windows platforms.