CVE-2018-4007

 

Published at: - 17-04-2019 05:29

Last modified: - 19-04-2022 08:15

Total changes: - 2

Description

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug.

Common Vulnerability Scoring System (CVSS)

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

 

Verification logic

 

Reference

• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0676

 

Keywords

NVD

 

CVE-2018-4007

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures