high7.8
CVE-2021-35523
Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM.
Impact
Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under "%APPDATA%\Securepoint SSL VPN" and add a external script file that is executed as privileged user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securepoint | Openvpn-Client | from 2.0.15 before 2.0.32 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2021/Jun/59
- https://bogner.sh/2021/04/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/
- https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34
- http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html
- http://seclists.org/fulldisclosure/2021/Jun/59
- https://bogner.sh/2021/04/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/
- https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34