PT-2020-18286 · Sparklabs · Viscosity

Rich Mirch · Published 2020-01-14 · Updated 2021-09-08 · CVE-2020-5180

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Viscosity version 1.8.2

Description The issue allows an unprivileged user to set certain OpenVPN parameters, potentially loading a malicious library into the OpenVPN process memory. This can lead to limited local privilege escalation. When a VPN connection is initiated using a TLS/SSL client profile, the privileges are dropped, and the library will be loaded, resulting in arbitrary code execution as a user with limited privileges.

Recommendations For Viscosity version 1.8.2, consider restricting the ability of unprivileged users to set OpenVPN parameters until a patch is available. As a temporary workaround, avoid using TLS/SSL client profiles for VPN connections to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-5180

Affected Products

Viscosity

References · 3

• https://osv.dev/vulnerability/CVE-2020-5180 · Vendor Advisory
• https://sparklabs.com/blog/viscosity-for-mac-windows-version-1-8-4 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5180 · Security Note