CVE-2022-24141: Medium severity IObit iTop VPN vulnerability
The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastateiTopVPNPipeServer on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient().
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2022-24141.
What is the severity of CVE-2022-24141?
The severity of CVE-2022-24141 is medium with a CVSS score of 5.4.
What is the affected software?
The affected software is iTop VPN version 3.2.
How can an attacker exploit CVE-2022-24141?
An attacker can exploit CVE-2022-24141 by opening a named pipe with the same name as datastate_iTopVPN_Pipe_Server and listening for connections to gain the token of another user.
Are there any references for CVE-2022-24141?
Yes, there are references available for CVE-2022-24141. You can find them at the following URLs: [http://iobit.com](http://iobit.com), [http://itop.com](http://itop.com), [https://github.com/tomerpeled92/CVE/](https://github.com/tomerpeled92/CVE/)