high7.8
CVE-2018-4010
An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1.
Impact
An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Protonvpn | Protonvpn | Version 1.5.1 |