Описание
VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.
Ссылки
- Broken Link
- Product
- Exploit
- Third Party AdvisoryVDB Entry
- Exploit
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:veepn:veepn:1.6.1:*:*:*:*:*:*:*
EPSS
Процентиль: 25%
0.00085
Низкий
7.8 High
CVSS3
Дефекты
CWE-428
Связанные уязвимости
CVSS3: 7.8
github
2 месяца назад
VeeVPN 1.6.1 contains an unquoted service path vulnerability in the VeePNService that allows remote attackers to execute code during startup or reboot with escalated privileges. Attackers can exploit this by providing a malicious service name, allowing them to inject commands and run as LocalSystem.
EPSS
Процентиль: 25%
0.00085
Низкий
7.8 High
CVSS3
Дефекты
CWE-428