CVE-2020-25744 Information

Description

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files which could cause a denial of service (DoS) condition because a symlink from LOCALAPPDATA\SaferVPN\Log is followed.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Reference

https://medium.com/@thebinary0x1/safervpn-for-windows-arbitrary-file-overwrite-dos-bdc88fdb5ead https://www.youtube.com/watch?v=0QdRJdA_aos

Attack Complexity

LOW

Privileges Required

LOW

User Interaction Required

LOW

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

HIGH

Base Score

HIGH

Base Severity

8.1