- Description
- Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 7.2
- Impact score
- 10
- Exploitability score
- 3.9
- Vector string
- AV:L/AC:L/Au:N/C:C/I:C/A:C
- nvd@nist.gov
- CWE-264
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:infotecs:vipnet_client:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C006E7D-B643-4E7F-BAFA-D74CD561EE28",
"versionEndIncluding": "3.2.10"
},
{
"criteria": "cpe:2.3:a:infotecs:vipnet_coordinator:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A647AAFF-8B3F-4B55-8A1A-E1322614D2BE",
"versionEndIncluding": "3.2.10"
},
{
"criteria": "cpe:2.3:a:infotecs:vipnet_personal_firewall:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3374283-8BC8-449D-A90D-43139C99FB31",
"versionEndIncluding": "3.1"
},
{
"criteria": "cpe:2.3:a:infotecs:vipnet_safedisk:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "83FD73F4-B5F3-4922-801E-FD0397E5C0E8",
"versionEndIncluding": "4.1"
}
],
"operator": "OR"
}
]
}
]