PT-2018-10025 · Safervpn+1 · Safervpn+1

Fabius Watson + 1 · Publicado 2018-05-02 · Atualizado 2019-10-03 · CVE-2018-10647

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SaferVPN version 4.2.5

Description The issue concerns a privilege escalation problem in the "SaferVPN.Service" service of SaferVPN for Windows. This service runs "openvpn.exe" using configuration files from the user's %LOCALAPPDATA%SaferVPNOvpnConfig directory. An authenticated attacker can modify these configuration files to specify a dynamic library plugin that runs for every new VPN connection attempt, allowing the execution of code in the context of the SYSTEM user.

Recommendations For SaferVPN version 4.2.5, consider restricting access to the %LOCALAPPDATA%SaferVPNOvpnConfig directory to prevent modification of OpenVPN configuration files until a patch is available. As a temporary workaround, disabling the "SaferVPN.Service" service may mitigate the risk of exploitation.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2018-10647

Produtos afetados

Openvpn

Safervpn

Referências · 3

• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-024.md · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-10647 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-10647 · Aviso do Fabricante