CVE-2020-12828
21.05.2020, 17:15
An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pango | virtual_private_network_software_development_kit | 𝑥 < 1.3.3.218 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration