PT-2022-16491 · Itop Vpn · Itop Vpn

Tomerpeled92 · Published 2022-07-06 · Updated 2022-07-14 · CVE-2022-24141

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iTop VPN version 3.2

Description The issue arises from the iTopVPNmini.exe component trying to connect to a named pipe called datastate iTopVPN Pipe Server in a loop. An attacker can exploit this by opening a named pipe with the same name, allowing them to gain the token of another user. This is achieved by listening for connections and abusing the ImpersonateNamedPipeClient function.

Recommendations For iTop VPN version 3.2, consider disabling the iTopVPNmini.exe component until a patch is available to prevent potential exploitation. Restrict access to the named pipe datastate iTopVPN Pipe Server to minimize the risk of an attacker gaining another user's token. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-24141

Affected Products

Itop Vpn

References · 6

• 🔥 https://github.com/tomerpeled92/CVE · Exploit
• http://iobit.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-24141 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24141 · Security Note
• https://t.me/cibsecurity/45644 · Telegram Post
• http://itop.com · Note