CVE-2018-4009

An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing

High · published April 15, 2019

CVSS v3.0
8.8
EPSS
0%
Percentile
37.2
In the wild
Unconfirmed
What it is

An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.2th percentile
Published
2019-04-15T19:46Z
EPSS history
Timeline
  • 15 APR 19:46Z
    An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing
    cvelistv5