CVE-2023-7245 - OpenCVE

The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/
https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/

History

Wed, 14 Aug 2024 16:00:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: OpenVPN

Published: 2024-02-20T11:08:29.089Z

Updated: 2024-08-14T14:36:15.335Z

Reserved: 2024-02-07T13:25:05.853Z

Link: CVE-2023-7245

Vulnrichment

Updated: 2024-08-02T08:57:35.027Z

NVD

Status : Awaiting Analysis

Published: 2024-02-20T11:15:07.750

Modified: 2024-08-14T15:35:03.783

Link: CVE-2023-7245

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-7245", "assignerOrgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "state": "PUBLISHED", "assignerShortName": "OpenVPN", "dateReserved": "2024-02-07T13:25:05.853Z", "datePublished": "2024-02-20T11:08:29.089Z", "dateUpdated": "2024-08-14T14:36:15.335Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "shortName": "OpenVPN", "dateUpdated": "2024-02-20T11:08:29.089Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-95", "description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')", "type": "CWE"}]}], "affected": [{"vendor": "OpenVPN", "product": "OpenVPN Connect", "platforms": ["Windows", "MacOS"], "versions": [{"status": "affected", "version": "3.0 (Windows)", "lessThanOrEqual": "3.4.3", "versionType": "minor releases"}, {"status": "affected", "version": "3.0 (macOS) ", "lessThanOrEqual": "3.4.7", "versionType": "minor releases"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable\n"}], "references": [{"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/", "tags": ["release-notes"]}, {"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/", "tags": ["release-notes"]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:57:35.027Z"}, "title": "CVE Program Container", "references": [{"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/", "tags": ["release-notes", "x_transferred"]}, {"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/", "tags": ["release-notes", "x_transferred"]}]}, {"affected": [{"vendor": "openvpn", "product": "connect", "cpes": ["cpe:2.3:a:openvpn:connect:*:*:*:*:*:macos:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.0", "status": "affected", "lessThan": "3.4.7", "versionType": "custom"}]}, {"vendor": "openvpn", "product": "connect", "cpes": ["cpe:2.3:a:openvpn:connect:*:*:*:*:*:windows:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.0", "status": "affected", "lessThan": "3.4.3", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-20T20:35:31.784407Z", "id": "CVE-2023-7245", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T14:36:15.335Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/", "tags": ["release-notes", "x_transferred"]}, {"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/", "tags": ["release-notes", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:57:35.027Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-7245", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-02-20T20:35:31.784407Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:openvpn:connect:*:*:*:*:*:macos:*:*"], "vendor": "openvpn", "product": "connect", "versions": [{"status": "affected", "version": "3.0", "lessThan": "3.4.7", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:openvpn:connect:*:*:*:*:*:windows:*:*"], "vendor": "openvpn", "product": "connect", "versions": [{"status": "affected", "version": "3.0", "lessThan": "3.4.3", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-14T14:35:24.859Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "OpenVPN", "product": "OpenVPN Connect", "versions": [{"status": "affected", "version": "3.0 (Windows)", "versionType": "minor releases", "lessThanOrEqual": "3.4.3"}, {"status": "affected", "version": "3.0 (macOS) ", "versionType": "minor releases", "lessThanOrEqual": "3.4.7"}], "platforms": ["Windows", "MacOS"], "defaultStatus": "unaffected"}], "references": [{"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/", "tags": ["release-notes"]}, {"url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-windows-change-log/", "tags": ["release-notes"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable\n"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-95", "description": "CWE-95: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')"}]}], "providerMetadata": {"orgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "shortName": "OpenVPN", "dateUpdated": "2024-02-20T11:08:29.089Z"}}}, "cveMetadata": {"cveId": "CVE-2023-7245", "state": "PUBLISHED", "dateUpdated": "2024-08-14T14:36:15.335Z", "dateReserved": "2024-02-07T13:25:05.853Z", "assignerOrgId": "36a55730-e66d-4d39-8ca6-3c3b3017965e", "datePublished": "2024-02-20T11:08:29.089Z", "assignerShortName": "OpenVPN"}, "dataVersion": "5.1"}