60
CVE-2018-4010
PoC —CVSS 3.1
7.8 high
EPSS
5%p92
Published
()
Modified
Description
An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.
- Vendors
- protonvpn
- Products
- protonvpn
- Weakness
- CWE-78
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H