Description
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenVPN | OpenVPN | 2.4.0 – ≤ 2.6.11 | — |
Advisories 4
- WID-SEC-2024-1433 OpenVPN: Mehrere Schwachstellen ermöglichen Denial of Service und Privilegieneskalation BSI CERT-Bund (WID) · Apr 3, 2025
- NCSC-2025-0077 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Mar 11, 2025
- ICSA-25-072-10 Siemens SINEMA Remote Connect Client CISA ICS & IT advisories · Mar 11, 2025
- SSA-615740 SSA-615740: Multiple Vulnerabilities in SINEMA Remote Connect Client Before V3.2 SP3 Siemens ProductCERT · Mar 11, 2025