Vulnerability Details CVE-2025-3110
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 17.3%
CVSS Severity
CVSS v3 Score 7.5
Products affected by CVE-2025-3110
-
cpe:2.3:a:openvpn:openvpn_access_server:2.10.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.10.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.10.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.10.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.11.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.11.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.11.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.11.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.12.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.12.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.12.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.12.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.13.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.13.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.14.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.14.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.14.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.14.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.7.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.7.4
-
cpe:2.3:a:openvpn:openvpn_access_server:2.7.5
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.4
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.5
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.6
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.7
-
cpe:2.3:a:openvpn:openvpn_access_server:2.8.8
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.0
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.1
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.2
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.3
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.4
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.5
-
cpe:2.3:a:openvpn:openvpn_access_server:2.9.6
-
cpe:2.3:a:openvpn:openvpn_access_server:3.0.0
-
cpe:2.3:a:openvpn:openvpn_access_server:3.0.1
-
cpe:2.3:a:openvpn:openvpn_access_server:3.0.2
-
cpe:2.3:a:openvpn:openvpn_access_server:3.1.0