Skip to content
Sign in
9.3 Critical

CVE-2018-4006 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig…

Description

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality. A non-root user is able to write a file anywhere on the system. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to exploit it successfully.

Affected products and versions

Product Affected versions Fixed in
Shimo VPN Versions not published

Other CVEs of Shimo VPN

The 6 CVEs of Shimo VPN →
CVE-2018-4004 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the… 7.1 High CVE-2018-4005 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the… 9.3 Critical CVE-2018-4007 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig… 9.0 Critical CVE-2018-4008 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript… 9.3 Critical
Track this CVE