PT-2023-22636 · Unknown · Shimo Vpn Client

Published 2023-05-04 · Updated 2023-05-10 · CVE-2023-30328

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Shimo VPN Client for macOS version 5.0.4

Description An issue in the helper tool of Shimo VPN Client for macOS allows attackers to bypass authentication via PID re-use.

Recommendations For Shimo VPN Client for macOS version 5.0.4, update to a newer version that contains a fix for this issue.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-30328

Affected Products

Shimo Vpn Client

References · 4

• 🔥 https://github.com/rand0mIdas/randomideas/blob/main/ShimoVPN.md · Exploit
• 🔥 https://raw.githubusercontent.com/rand0mIdas/randomideas/main/ShimoVPN.md?token=GHSAT0AAAAAACA3WX4SPH2YYOCWGV6LLVSGZBIEKEQ · Exploit
• https://osv.dev/vulnerability/CVE-2023-30328 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30328 · Security Note