Question

Hi folks

Just doing some standard new firmware tests before fleet deployment

There is a GUI bug in RUT9XX_R00_00.06.07.7

When an PKCS12 based OpenVPN connection is deleted, the PASS[word] files in /etc/openvpn/ are not deleted as part of the cleanup operation.

These could be used by an attacker to look for password structures in the upstream server

Regards

BB

Answer 1

Hello,

Thank you very much for your concern. I have forwarded your insight on this issue to our RnD team. I will inform you later about the progress.

Regards.