CVE-2025-34304: ipfire before 2.29 (exclusive), 2.29 · update core_update183, 2.29 · update core_update184 (+13 more affected…

Affected technology

ipfire · before 2.29 (exclusive)
ipfire

ipfire · 2.29 · update core_update183
ipfire

ipfire · 2.29 · update core_update184
ipfire

ipfire · 2.29 · update core_update185
ipfire

ipfire · 2.29 · update core_update186
ipfire

ipfire · 2.29 · update core_update187
ipfire

ipfire · 2.29 · update core_update188
ipfire

ipfire · 2.29 · update core_update189
ipfire

ipfire · 2.29 · update core_update190
ipfire

ipfire · 2.29 · update core_update191
ipfire

ipfire · 2.29 · update core_update192
ipfire

ipfire · 2.29 · update core_update193
ipfire

ipfire · 2.29 · update core_update194
ipfire

ipfire · 2.29 · update core_update195
ipfire

ipfire · 2.29 · update core_update196
ipfire

ipfire · 2.29 · update core_update197
ipfire

IPFire · 0 to before 2.29 (Core Update 198)
IPFire.org

Description’s affected range: versions prior to 2.29 (Core Update 198)

Component: /cgi-bin/logs.cgi/ovpnclients.dat

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authenticated attacker can manipulate the SQL query used when viewing OpenVPN connection logs via the CONNECTION_NAME parameter. Vendor/CNA’s CVSS 4.0 assessment (base score 7.1/10) rates confidentiality impact as high; integrity and availability impact as none.