CVE-2014-9755

The hardware VPN client in Viprinet MultichannelVPN Router 300 version 2013070830/2013080900 does not validate the remote VPN endpoint identity (through the checking of the endpoint's SSL key) before initiating the exchange, which allows remote attackers to perform a replay attack.

• CWE-20

• http://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/537441/100/0/threaded
• http://packetstormsecurity.com/files/135614/Viprinet-Multichannel-VPN-Router-300-Identity-Verification-Fail.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/Feb/8Mailing List, Third Party Advisory
• http://www.securityfocus.com/archive/1/537441/100/0/threaded

Published

Jan 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9749Squid 3.4.4 through 3.4.11 and 3.5.0.1 through 3.5.1, when D…
• CVE-2014-9750ntp_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey…
• CVE-2014-9751The read_network_packet function in ntp_io.c in ntpd in NTP …
• CVE-2014-9752Unrestricted file upload vulnerability in mods/_core/propert…
• CVE-2014-9753confirm.php in ATutor 2.2 and earlier allows remote attacker…9.8
• CVE-2014-9754The hardware VPN client in Viprinet MultichannelVPN Router 3…
• CVE-2014-9756The psf_fwrite function in file_io.c in libsndfile allows at…
• CVE-2014-9757The Ignite Realtime Smack XMPP API, as used in Atlassian Bam…
• CVE-2014-9758Cross-site scripting (XSS) vulnerability in Magento E-Commer…6.1
• CVE-2014-9759Incomplete blacklist vulnerability in the config_is_private …
• CVE-2014-9760Cross-site scripting (XSS) vulnerability in the displayLogin…6.1
• CVE-2014-9761Multiple stack-based buffer overflows in the GNU C Library (…