CVE-2020-25744

HIGH

SaferVPN < 5.0.3.3 - Arbitrary File Overwrite via Symlink Following

Title source: llm
STIX 2.1

Description

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service (DoS) condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed.

References (2)

Core 2
Core References
Exploit, Third Party Advisory x_refsource_misc
https://www.youtube.com/watch?v=0QdRJdA_aos

Scores

CVSS v3 8.1
EPSS 0.0142
EPSS Percentile 69.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE
CWE-59
Status published
Products (1)
safervpn/safervpn < 5.0.3.3
Published Sep 18, 2020
Tracked Since Feb 18, 2026