CVE-2019-17387 - An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS

Back Back to CVE browser

HIGH

An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS

Published Dec 5, 2019

7.8

HIGH

CVSS 3.1

EPSS 0.72%

Description

An authentication flaw in the AVPNC_RP service in Aviatrix VPN Client through 2.2.10 allows an attacker to gain elevated privileges through arbitrary code execution on Windows, Linux, and macOS.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html
x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7791
Advisory
https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/
x_refsource_MISCExploitThird Party Advisory
https://immersivelabs.com/blog/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://docs.aviatrix.com/HowTos/UCC_Release_Notes.html		x_refsource_MISCRelease NotesVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-7791		Advisory
https://immersivelabs.com/2019/12/04/aviatrix-vpn-client-vulnerability/		x_refsource_MISCExploitThird Party Advisory
https://immersivelabs.com/blog/		x_refsource_MISCThird Party Advisory