Skip to content
OpenAdvisories
High · 8.8 CVE-2018-3952 EUVD-2018-15738GHSA-5f3h-x9wv-4c7q

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration fil…

Published Sep 7, 2018 · Updated Sep 16, 2024 · Assigned by talos

Description

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges.

Affected products

VendorProductAffectedFixed
Talos NordVPN NordVPN 6.14.28.0 —

References