CVE-2018-10204

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service

published April 18, 2018

CVSS
—
EPSS
1%
Percentile
74.0
In the wild
Unconfirmed
What it is

PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service. When configured to use the OpenVPN protocol, the "sevpnclient" service executes "openvpn.exe" using the OpenVPN config file located at %PROGRAMDATA%\purevpn\config\config.ovpn. This file allows "Write" permissions to users in the "Everyone" group. An authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM account.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01497 · 74.0th percentile
Published
2018-04-18T21:00Z
EPSS history
Timeline
  • 18 APR 21:00Z
    PureVPN 6.0.1 for Windows suffers from a SYSTEM privilege escalation vulnerability in its "sevpnclient" service
    cvelistv5