CVE-2019-25343
NextVPN 4.10 - Insecure File Permissions
NextVPN 4.10 contains an insecure file permissions vulnerability that allows local users to modify executable files with full access rights. Attackers can replace system executables with malicious files to gain SYSTEM or Administrator privileges through unauthorized file modification.
CVSS 4.0 · 8.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products