CVE-2018-4010 An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the...
HighCVSS 7.8
EPSS 5.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An exploitable code execution vulnerability exists in the connect functionality of ProtonVPN VPN client 1.5.1. A specially crafted configuration file can cause a privilege escalation, resulting in the ability to execute arbitrary commands with the system's privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| protonvpn | = 1.5.1 | No fix listed |
| Talos ProtonVPN | = ProtonVPN VPN Client 1.5.1 | No fix listed |
References
- 105319 broken-link third-party-advisory vdb-entry
- talosintelligence.com exploit third-party-advisory