CVE-2018-4007

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality

Critical · published April 17, 2019

CVSS v3.0
9.0
EPSS
0%
Percentile
31.5
In the wild
Unconfirmed
What it is

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug.

The record
Technical detail
CVSS v3.0
9.0 · CRITICAL
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00386 · 31.5th percentile
Published
2019-04-17T14:15Z
EPSS history
Timeline
  • 17 APR 14:15Z
    An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality
    cvelistv5