Aviatrix VPN Client 1.4

CPE Details

Aviatrix VPN Client 1.4
aviatrix
vpn_client
1.4
2019-12-09
16h28 +00:00
2019-12-09
16h28 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:aviatrix:vpn_client:1.4:*:*:*:*:*:*:*

Informations

Vendor

aviatrix

Product

vpn_client

Version

1.4

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-31776 2021-04-28 22h03 +00:00 Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators.
7.8
Haute
CVE-2020-13417 2020-05-22 18h47 +00:00 An Elevation of Privilege issue was discovered in Aviatrix VPN Client before 2.10.7, because of an incomplete fix for CVE-2020-7224. This affects Linux, macOS, and Windows installations for certain OpenSSL parameters.
9.8
Critique
CVE-2019-17388 2019-12-05 16h08 +00:00 Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications.
7.8
Haute
CVE-2019-17387 2019-12-05 16h07 +00:00 An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.
7.8
Haute