PT-2023-26144 · Panda Security · Panda Security Vpn

Heechan Kim · Publicado 2023-07-13 · Atualizado 2023-07-27 · CVE-2023-37849

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Panda Security VPN for Windows versions prior to 15.14.8

Description A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file in the same directory as the executable.

Recommendations For versions prior to 15.14.8, update to version 15.14.8 or later to resolve the issue.

Exploit

Correção

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-37849

Produtos afetados

Panda Security Vpn

Referências · 5

• 🔥 https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer · Exploit
• https://osv.dev/vulnerability/CVE-2023-37849 · Aviso do Fabricante
• https://pandasecurity.com/en/homeusers/vpn · Nota
• https://pandasecurity.com/en/support/card?id=100080 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-37849 · Nota de Segurança