{"uuid": "721e5483-0c85-41ae-89be-25ea6182dea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product:  Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE:  CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:34.486651Z"}