Cross site scripting

2023-11-2012:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

out-of-bounds write

privilege escalation

authenticated user

vulnerability

ssl vpn client

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message.

CPENameOperatorVersion
secuextender_ssl_vpneq4.0.4.0

CPE	Name	Operator	Version
	secuextender_ssl_vpn	eq	4.0.4.0

References

www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-secuextender-ssl-vpn-client-software