cve/2020/CVE-2020-12828.md
2024-05-25 21:48:12 +02:00

1.0 KiB

CVE-2020-12828

Description

An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.

POC

Reference

No PoCs from references.

Github