漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Total VPN win-service.exe unquoted search path
Vulnerability Description
A weakness has been identified in Total VPN 0.5.29.0 on Windows. Affected by this vulnerability is an unknown functionality of the file C:\Program Files\Total VPN\win-service.exe. Executing a manipulation can lead to unquoted search path. It is possible to launch the attack on the local host. This attack is characterized by high complexity. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
未经引用的搜索路径或元素
Vulnerability Title
Total VPN 代码问题漏洞
Vulnerability Description
Total VPN是美国Total VPN公司的一个虚拟专用网络服务软件。 Total VPN 0.5.29.0版本存在代码问题漏洞,该漏洞源于文件C:Program FilesTotal VPNwin-service.exe存在未加引号的搜索路径问题,可能导致本地攻击。
CVSS Information
N/A
Vulnerability Type
N/A