Vulnerabilities

TI-2018-02974 CVE-2018-4006 · GHSA-77gm-qcq9-fqc2

Improper input validation in Shimo VPN

LOW 35

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the writeConfig functionality.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0068 Published 2019-04-17 No fix listed CWE-20

TI-2018-02972 CVE-2018-4004 · GHSA-35g5-j45f-57f3

LOW 25

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the disconnectService functionality.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00376 Published 2019-04-17 No fix listed CWE-20

TI-2018-02973 CVE-2018-4005 · GHSA-mjxx-xwvh-256r

LOW 35

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the configureRoutingWithCommand function.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0068 Published 2019-04-17 No fix listed CWE-20

TI-2018-02975 CVE-2018-4007 · GHSA-6vpc-pmp9-8j2w

LOW 31

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00386 Published 2019-04-17 No fix listed CWE-20

TI-2018-02976 CVE-2018-4008 · GHSA-f3ff-46gc-5m87

LOW 34

An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the RunVpncScript command.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00422 Published 2019-04-15 No fix listed CWE-269

TI-2018-02977 CVE-2018-4009 · GHSA-2442-7w3j-mf4f

LOW 34

An exploitable privilege escalation vulnerability exists in the Shimo VPN helper service due to improper validation of code signing.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00443 Published 2019-04-15 No fix listed CWE-494