CVE-2021-3606

7.8 HIGH

OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file...

Published: 2021-07-02 · Last updated: 2026-06-17

Severity and scoring

CVSS: 7.8 HIGH
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE: CWE-427

Affected products

Vendor	Product
openvpn	openvpn

Description

OpenVPN before version 2.5.3 on Windows allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if present, which allows the user to run arbitrary code with the same privilege level as the main OpenVPN process (openvpn.exe).

Source: NVD

References

[NVD]https://nvd.nist.gov/vuln/detail/CVE-2021-3606
[Vendor advisory]https://community.openvpn.net/openvpn/wiki/CVE-2021-3606
[Vendor advisory]https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements
[Vendor advisory]https://community.openvpn.net/openvpn/wiki/CVE-2021-3606
[Vendor advisory]https://community.openvpn.net/openvpn/wiki/SecurityAnnouncements

Related CVEs

Same vendor

CVE-2026-9560 — Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary command... (7.8 HIGH)
CVE-2021-3824 — OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL (6.1 MEDIUM)
CVE-2021-3547 — OpenVPN 3 Core Library version 3.6 and 3.6.1 allows a man-in-the-middle attacker to bypass the certificate authentication by issuing an u... (7.4 HIGH)
CVE-2021-3613 — OpenVPN Connect 3.2.0 through 3.3.0 allows local users to load arbitrary dynamic loadable libraries via an OpenSSL configuration file if ... (7.8 HIGH)
CVE-2014-5455 — Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect vers... (5.3 MEDIUM)

Same CWE

CVE-2026-12003 — To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build...
CVE-2024-22451 — Dell Peripheral Manager, versions from 1.5.1 to 1.7.2, contain an uncontrolled search path element vulnerability (6.7 MEDIUM)
CVE-2024-22447 — Dell Peripheral Manager, versions prior to 1.7.3, contain an uncontrolled search path element vulnerability (6.7 MEDIUM)
CVE-2026-5064 — Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow ...
CVE-2026-50100 — Multiple printer drivers provided by Ricoh Company, Ltd (7.8 HIGH)