CVE-2013-3496

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-22 · updated 2026-06-16
Weakness: CWE-264

Description

Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.

Affected products

Infotecs Vipnet Client: through 3.2.10
Infotecs Vipnet Coordinator: through 3.2.10
Infotecs Vipnet Personal Firewall: through 3.1
Infotecs Vipnet Safedisk: through 4.1

References

http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html
http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html

Get alerted when CVE-2013-3496 or the next vulnerability affects your stack