OpenCVE

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Watchguard	Panda Security Vpn

Configuration 1 [-]

cpe:2.3:a:watchguard:panda_security_vpn:*:*:*:*:*:windows:*:*

No data.

References

Link	Providers
https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/
https://www.pandasecurity.com/en/homeusers/vpn/
https://www.pandasecurity.com/en/support/card?id=100080

History

Wed, 30 Oct 2024 19:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-07-13T00:00:00

Updated: 2024-10-30T19:04:34.024Z

Reserved: 2023-07-10T00:00:00

Link: CVE-2023-37849

Vulnrichment

Updated: 2024-08-02T17:23:26.945Z

NVD

Status : Modified

Published: 2023-07-13T22:15:09.110

Modified: 2024-11-21T08:12:19.380

Link: CVE-2023-37849

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:watchguard:panda_security_vpn:*:*:*:*:*:windows:*:*", "matchCriteriaId": "901DB047-FD5F-4FC9-9379-894BE393E67B", "versionEndExcluding": "15.14.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe."}, {"lang": "es", "value": "Una vulnerabilidad de secuestro de DLL en Panda Security VPN para Windows anterior a la versi\u00f3n v15.14.8 permite a los atacantes ejecutar c\u00f3digo arbitrario mediante la colocaci\u00f3n de un archivo DLL manipulado en el mismo directorio que \"PANDAVPN.exe\". "}], "id": "CVE-2023-37849", "lastModified": "2024-11-21T08:12:19.380", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.6, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-07-13T22:15:09.110", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.pandasecurity.com/en/homeusers/vpn/"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://www.pandasecurity.com/en/support/card?id=100080"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.pandasecurity.com/en/homeusers/vpn/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.pandasecurity.com/en/support/card?id=100080"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-427"}], "source": "nvd@nist.gov", "type": "Primary"}]}