{"vulnerability": "CVE-2021-35523", "sightings": [{"uuid": "9ea2ed73-9ea9-4613-815b-3dc0184049ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "published-proof-of-concept", "source": "https://t.me/D4RKW0R1D/3645", "content": "Red Team Tactics\nLeveraging a 0-day vulnerability in Zoom\ud83d\ude01\nhttps://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e\n\nexploit\nCVE-2021-37152:\nhttps://github.com/lhashashinl/CVE-2021-37152\n// Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\n\nThreat Research\n1. CVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n2. Detailed overview of tactics, techniques and procedures (TTPs) of the most active REvil partners\nhttps://blog.group-ib.com/revil_raas\n\nWLAN Security\nRealtek WiFi Firmware and a Fully 8051-based Keylogger Using RealWOW Technology\nhttps://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html", "creation_timestamp": "2021-07-06T05:06:08.000000Z"}, {"uuid": "c11a15a6-4447-4266-9890-8aafe243d7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "published-proof-of-concept", "source": "https://t.me/D4RKW0R1D/93", "content": "Red Team Tactics\nLeveraging a 0-day vulnerability in Zoom\ud83d\ude01\nhttps://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e\n\nexploit\nCVE-2021-37152:\nhttps://github.com/lhashashinl/CVE-2021-37152\n// Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\n\nThreat Research\n1. CVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n2. Detailed overview of tactics, techniques and procedures (TTPs) of the most active REvil partners\nhttps://blog.group-ib.com/revil_raas\n\nWLAN Security\nRealtek WiFi Firmware and a Fully 8051-based Keylogger Using RealWOW Technology\nhttps://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html", "creation_timestamp": "2021-07-06T07:06:05.000000Z"}, {"uuid": "003d48ed-24a2-4a7e-b70a-5636f93ddfc9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/3776", "content": "#Threat_Research\n1. CVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n2. Detailed overview of tactics, techniques and procedures (TTPs) of the most active REvil partners\nhttps://blog.group-ib.com/revil_raas", "creation_timestamp": "2021-07-06T12:18:40.000000Z"}, {"uuid": "4f02b266-ca85-4a95-a39b-db6aaa3ba1eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "seen", "source": "https://t.me/cissp/3668", "content": "Red Team Tactics\nLeveraging a 0-day vulnerability in Zoom\ud83d\ude01\nhttps://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e\n\nexploit\nCVE-2021-37152:\nhttps://github.com/lhashashinl/CVE-2021-37152\n// Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\n\nThreat Research\n1. CVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n2. Detailed overview of tactics, techniques and procedures (TTPs) of the most active REvil partners\nhttps://blog.group-ib.com/revil_raas\n\nWLAN Security\nRealtek WiFi Firmware and a Fully 8051-based Keylogger Using RealWOW Technology\nhttps://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html", "creation_timestamp": "2026-09-01T17:00:46.618845Z"}, {"uuid": "721e5483-0c85-41ae-89be-25ea6182dea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product:  Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE:  CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:34.486651Z"}, {"uuid": "354e5202-e907-412c-a4ed-f93bc53826f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product:  Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE:  CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:09.170497Z"}, {"uuid": "be763400-90eb-4b69-8097-26d12da34930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35523", "type": "seen", "source": "https://t.me/cissp/3668", "content": "Red Team Tactics\nLeveraging a 0-day vulnerability in Zoom\ud83d\ude01\nhttps://medium.com/manomano-tech/a-red-team-operation-leveraging-a-zero-day-vulnerability-in-zoom-80f57fb0822e\n\nexploit\nCVE-2021-37152:\nhttps://github.com/lhashashinl/CVE-2021-37152\n// Exploit Accsess network clients by sending packets in wirless TP-LINK and preparing for a mitm attack\n\nThreat Research\n1. CVE-2021-35523:\nLPE in Securepoint SSL VPN Client 2.0.3\nhttps://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30\n2. Detailed overview of tactics, techniques and procedures (TTPs) of the most active REvil partners\nhttps://blog.group-ib.com/revil_raas\n\nWLAN Security\nRealtek WiFi Firmware and a Fully 8051-based Keylogger Using RealWOW Technology\nhttps://8051enthusiast.github.io/2021/07/05/002-wifi_fun.html", "creation_timestamp": "2026-09-02T01:04:34.098299Z"}]}