CVE-2018-4005

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful...

CVE-2018-4005

The CVE-2018-4005 entry affects Shimo VPN 4.1.5.1, specifically the helper service’s configureRoutingWithCommand function. Cisco Talos documents a local-privilege-escalation flaw in the helper tool, enabling a non-privileged user with local access to escalate to root by abusing the function to ru...