PT-2023-26144 · Panda Security · Panda Security Vpn

Heechan Kim

·

CVE-2023-37849

·

Published

2023-07-13

·

Updated

2023-07-27

CVSS v3.1

6.5

Medium

VectorAV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Panda Security VPN for Windows versions prior to 15.14.8
Description A DLL hijacking issue allows attackers to execute arbitrary code by placing a crafted DLL file in the same directory as the executable.
Recommendations For versions prior to 15.14.8, update to version 15.14.8 or later to resolve the issue.

Exploit

Fix

Uncontrolled Search Path Element

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-37849

Affected Products

Panda Security Vpn