Security Advisory

CVE-2025-12286

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-27 14:02:08

Last updated 2026-02-24 07:11:49

Assigner VulDB

CVSS score 7.3

State PUBLISHED

Description

A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files (x86)\VeePN\avservice\avservice.exe of the component AVService. This manipulation causes unquoted search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way.

← Browse all CVEs View on cve.org ↗