CVE-2013-3496

HIGH 7.2CVE-2013-3496 · Published 22/05/2013 · updated 16/06/2026

In short

CVE-2013-3496 is a HIGH (CVSS 7.2) vulnerability affecting vipnet client (infotecs), vipnet coordinator (infotecs), vipnet personal firewall (infotecs).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
vipnet client infotecs	`≤ 3.2.10`	No fix yet
vipnet coordinator infotecs	`≤ 3.2.10`	No fix yet
vipnet personal firewall infotecs	`≤ 3.1`	No fix yet
vipnet safedisk infotecs	`≤ 4.1`	No fix yet

Description

Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.

References

archives.neohapsis.com/archives/bugtraq/2013-05/0072.html

More vulnerabilities in vipnet client

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free