CVE-2015-0925

This Metasploit module exploits CVE-2015-0925 in the IPass Client service by abusing a named pipe to force the service to load a DLL from an SMB share, achieving remote command execution.

This Metasploit module exploits a vulnerability in the IPass Client service by abusing a named pipe to force the service to load a DLL from an SMB share, achieving remote command execution.

This Metasploit module exploits a privilege escalation vulnerability in the iPass Mobile Client Service by interacting with the named pipe '\\.\pipe\IPEFSYSPCPIPE' to execute arbitrary commands as SYSTEM via the 'LaunchAppSysMode' command.