Lucene search
HistoryJul 13, 2023 - 10:15 p.m.
CVE-2023-37849
dll hijacking
windows
panda security vpn
arbitrary code execution
crafted dll file
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
20.9%
A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe.
Affected configurations
Node
watchguardpanda_security_vpnRange<15.14.8windows
Related
prion
prion
Spoofing
2023-07-13 22:15:00
cvelist
cvelist
CVE-2023-37849
2023-07-13 00:00:00
cve
cve
CVE-2023-37849
2023-07-13 22:15:09
6.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
20.9%
Related for NVD:CVE-2023-37849