Non-standard installation path vulnerability in OpenVPN GUI installer allows arbitrary file execution
CVE-2023-7235

Currently unrated

Key Information:

Vendor

Openvpn
Status
Openvpn
Vendor
CVE Published:
21 February 2024

What is CVE-2023-7235?

The OpenVPN GUI installer before version 2.6.9 did not set the proper access control restrictions to the installation directory of OpenVPN binaries when using a non-standard installation path, which allows an attacker to replace binaries to run arbitrary executables.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

OpenVPN Windows 0 <= 2.6.8

References

https://community.openvpn.net/openvpn/wiki/CVE-2023-7235

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.