Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25343. PoCs published by SajjadBnd.
AI-analyzed exploit summary The exploit demonstrates insecure file permissions in NextVPN v4.10, allowing an attacker to replace service binaries with malicious executables for privilege escalation. The PoC includes detailed file permission listings and a clear exploitation method.
Description
NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.
Exploits (1)
The exploit demonstrates insecure file permissions in NextVPN v4.10, allowing an attacker to replace service binaries with malicious executables for privilege escalation. The PoC includes detailed file permission listings and a clear exploitation method.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H