CVE-2021-45035 - CVE House
Back to Database
Status published Medium CVE-2021-45035

Velneo vClient Improper authentication

Vulnerability Description

Velneo vClient on its 28.1.3 version, does not correctly check the certificate of authenticity by default. This could allow an attacker that has access to the network to perform a MITM attack in order to obtain the user´s credentials.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-45035

Credits & Attribution

No credits recorded in the NVD database.

References

More from Velneo

View All →
CVE-2021-45036
Velneo vClient improper authentication
High 8.7

Affected Vendor

Affected Software

Velneo vClient
Vulnerable Versions:
28.1.3

Timeline

Official Publish: September 23rd, 2022
Last Modified: May 22nd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N

Weaknesses (CWE)

CWE-287

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1556 Modify Authentication Process
Credential Access