Security Advisory

CVE-2020-12828

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-05-21 16:25:46

Last updated 2024-08-04 12:04:22

Assigner mitre

State PUBLISHED

Description

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.

← Browse all CVEs View on cve.org ↗