CVE-2018-3952: OS Command Injection
Published Sep 7, 2018
·Updated
An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges.
Affected Software
1 affected component
NordVPN NordVPN=6.14.28.0
Event History
Sep 7, 2018
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2018-3952?
The severity of CVE-2018-3952 is rated high with a CVSS score of 8.8.
2
How can I fix CVE-2018-3952?
To fix CVE-2018-3952, update NordVPN to the latest version that resolves this vulnerability.
3
What type of vulnerability is CVE-2018-3952?
CVE-2018-3952 is an exploitable code execution vulnerability related to OS Command Injection.
4
What are the potential impacts of CVE-2018-3952?
The potential impacts of CVE-2018-3952 include privilege escalation and the execution of arbitrary commands with system privileges.
5
Which software is affected by CVE-2018-3952?
CVE-2018-3952 specifically affects NordVPN version 6.14.28.0.