Read the docs

Shimovpn

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Shimovpn records in CISA KEV

No Shimovpn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

TI-2018-02974 CVE-2018-4006 · GHSA-77gm-qcq9-fqc2

Improper input validation in Shimo VPN

Priority LOW 35

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0068 Published 2019-04-17 No fix listed CWE-20
TI-2018-02973 CVE-2018-4005 · GHSA-mjxx-xwvh-256r

Improper input validation in Shimo VPN

Priority LOW 35

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0068 Published 2019-04-17 No fix listed CWE-20
TI-2018-02976 CVE-2018-4008 · GHSA-f3ff-46gc-5m87

Improper privilege management in Shimo VPN

Priority LOW 34

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00422 Published 2019-04-15 No fix listed CWE-269
TI-2018-02975 CVE-2018-4007 · GHSA-6vpc-pmp9-8j2w

Improper input validation in Shimo VPN

Priority LOW 31

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00386 Published 2019-04-17 No fix listed CWE-20
TI-2018-02972 CVE-2018-4004 · GHSA-35g5-j45f-57f3

Improper input validation in Shimo VPN

Priority LOW 25

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00376 Published 2019-04-17 No fix listed CWE-20
Open these records in search →