PerFact OpenVPN-Client
view advisory published 2021-02-25
Successful exploitation of this vulnerability could allow for local privilege escalation or remote code execution through a malicious webpage.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27406US | high8.8 | — | ||
An attacker can take leverage on PerFact OpenVPN-Client versions 1.4.1.0 and prior to send the config command from any application running on the local host machine to force the ba… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationOpenVPN-Client
PerFact has released Version 1.6.0, which mitigates this vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan