8.8
High
CVE-2018-4009 An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of…
Description
An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine to successfully exploit this bug.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Shimo VPN | Versions not published |
Other CVEs of Shimo VPN
The 6 CVEs of Shimo VPN →
CVE-2018-4006
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig…
9.3
Critical
CVE-2018-4004
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the…
7.1
High
CVE-2018-4005
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the…
9.3
Critical
CVE-2018-4007
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig…
9.0
Critical