Vulnerability Details CVE-2022-46782
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. A logged-in user, able to only launch the VPNSSL Client, can use the OpenVPN instance to execute malicious code as administrator on the local machine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.6%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-46782
-
cpe:2.3:a:stormshield:ssl_vpn_client:-
-
cpe:2.3:a:stormshield:ssl_vpn_client:2.1.0
-
cpe:2.3:a:stormshield:ssl_vpn_client:3.0.0
-
cpe:2.3:a:stormshield:ssl_vpn_client:3.0.1
-
cpe:2.3:a:stormshield:ssl_vpn_client:3.1.0
-
cpe:2.3:a:stormshield:ssl_vpn_client:3.1.1