CVEvulnerability

CVE-2013-3496

7.2 HIGH Published 2013-05-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-05-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.

Affected configurations

• infotecs vipnet client (<= 3.2.10) • infotecs vipnet coordinator (<= 3.2.10) • infotecs vipnet personal firewall (<= 3.1) • infotecs vipnet safedisk (<= 4.1)

Related

Weakness · not in database (1)

References