Alertas de Seguridad de la Información

luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory. Attackers can upload malicious payloads to gain persistent root code execution by placing SSH keys in system directories accessible on reboot.

El router MSI Radix AXE6600 versión de firmware v781521 contiene una vulnerabilidad de inyección de comandos (CVSS 9.8) en la función OpenVPN que permite a atacantes remotos ejecutar comandos arbitrarios y obtener privilegios de root. La función macfilter puede ser explotada sin autenticación para comprometer completamente el dispositivo, afectando la seguridad perimetral de redes corporativas en LATAM. Esta vulnerabilidad representa un riesgo crítico para empresas que usan este modelo como gateway VPN o punto de acceso en infraestructuras sensibles.

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7_alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of service

luci-proto-openvpn through 0.11.1, fixed in commit e4ff45e, contains a command injection vulnerability in the generateKey ubus method where the cl_meta parameter is interpolated into a shell command without proper escaping or quoting. An authenticated LuCI user with OpenVPN protocol configuration access can inject arbitrary shell metacharacters into cl_meta to execute commands as root via the pope…