Skip to content
OpenAdvisories
Medium · 5.9 CVE-2022-23171 EUVD-2022-28262GHSA-386g-rfxj-73f8

AtlasVPN - Privilege Escalation

Published Jun 21, 2022 · Updated Sep 17, 2024 · Assigned by INCD

Description

AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed.

Affected products

VendorProductAffectedFixed
AtlasVPN AtlasVPN 2.4.0 – ≤ 2.4.2 —

References