Skip to content
Sign in
9.0 Critical

CVE-2018-4007 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig…

Description

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug.

Affected products and versions

Product Affected versions Fixed in
Shimo VPN Versions not published

Other CVEs of Shimo VPN

The 6 CVEs of Shimo VPN →
CVE-2018-4006 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig… 9.3 Critical CVE-2018-4004 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the… 7.1 High CVE-2018-4005 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the… 9.3 Critical CVE-2018-4008 An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript… 9.3 Critical
Track this CVE