Beveiligingsadvies

CVE-2025-12286

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-10-27 14:02:08
Laatst bijgewerkt 2026-02-24 07:11:49
Toegewezen door VulDB
CVSS-score 7.3
Status PUBLISHED

Beschrijving

A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files (x86)\VeePN\avservice\avservice.exe of the component AVService. This manipulation causes unquoted search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.