What’s Vulnerable › Vulnerabilities

CVE-2021-35523

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-06-28 · updated 2026-06-17
• Weakness: CWE-269

Description

Securepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under "%APPDATA%\Securepoint SSL VPN" and add a external script file that is executed as privileged user.

Affected products

• Securepoint Openvpn-Client: from 2.0.15 before 2.0.32 — fixed in 2.0.32

How to fix

Upgrade to a fixed version: Securepoint Openvpn-Client 2.0.32. Check the vendor advisory for mitigations.

References

• http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2021/Jun/59
• https://bogner.sh/2021/04/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/
• https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34
• http://packetstormsecurity.com/files/163320/Securepoint-SSL-VPN-Client-2.0.30-Local-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2021/Jun/59
• https://bogner.sh/2021/04/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/
• https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34

Get alerted when CVE-2021-35523 or the next vulnerability affects your stack