CVE-2022-24141

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop

published July 6, 2022

CVSS
—
EPSS
1%
Percentile
47.1
In the wild
Unconfirmed
What it is

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00582 · 47.1th percentile
Published
2022-07-06T12:41Z
EPSS history
Timeline
  • 06 JUL 12:41Z
    The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop
    cvelistv5