CVE-2022-26634

High

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.

mitre·CWE-428·Published 2022-05-20

CVSS

7.8

EPSS

0.00

KEV

Exploits

cve.orgen

120 chars

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.

NVDen

120 chars

HMA VPN v5.3.5913.0 contains an unquoted service path which allows attackers to escalate privileges to the system level.

HMA VPN versión v5.3.5913.0, contiene una ruta de servicio no citada que permite a atacantes escalar privilegios al nivel del sistema

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	7.2	3.9	10.0	AV:L/AC:L/Au:N/C:C/I:C/A:C
3.1	Primary	NVD	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H