Beveiligingsadvies

CVE-2019-25283

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-02-04 23:17:24

Laatst bijgewerkt 2026-03-05 01:25:58

Toegewezen door VulnCheck

CVSS-score 8.5

Status PUBLISHED

Beschrijving

Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can place malicious executables in the unquoted service path to gain elevated access during service startup or system reboot.

← Alle CVE's bekijken Bekijk op cve.org ↗