Description
IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, can be overwritten.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IXON | VPN Client | < 1.4.4 | 1.4.4 |
Advisories 1
- VDE-2025-042 Lenze: VPN Client Privilege Escalation in combination with Lenze x500 IoT Gateway CERT@VDE · May 27, 2025