Security Advisory
CVE-2020-12828
9.8
CRITICAL
Vulnerability Description
An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.
Published Date
May 21, 2020
Official Source
NIST NVD Advisory