Code injection

2009-12-0100:30:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

65.1%

JSON

The StartServiceCtrlDispatcher function in the cvpnd service (cvpnd.exe) in Cisco VPN client for Windows before 5.0.06.0100 does not properly handle an ERROR_FAILED_SERVICE_CONTROLLER_CONNECT error, which allows local users to cause a denial of service (service crash and VPN connection loss) via a manual start of cvpnd.exe while the cvpnd service is running.

CPENameOperatorVersion
vpn_clienteq5.0.2.90 base-windows
vpn_clienteq4.8.2.10 base-windows
vpn_clienteq3.5.1c windows
vpn_clienteq4.7.0.0 windows
vpn_clienteq3.1 windows
vpn_clienteq5.0.1.600 base-windows
vpn_clienteq5.0.1 windows
vpn_clienteq3.0 windows
vpn_clienteq4.8.1 windows
vpn_clienteq4.9 base-windows

Name	Operator	Version
vpn_client	eq	5.0.2.90 base-windows
vpn_client	eq	4.8.2.10 base-windows
vpn_client	eq	3.5.1c windows
vpn_client	eq	4.7.0.0 windows
vpn_client	eq	3.1 windows
vpn_client	eq	5.0.1.600 base-windows
vpn_client	eq	5.0.1 windows
vpn_client	eq	3.0 windows
vpn_client	eq	4.8.1 windows
vpn_client	eq	4.9 base-windows