VDB
CVE-2022-25166
CVE-2022-25166
PUBLISHED
CVSS 4.300000190734863 MEDIUM
An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuration file when referencing file paths for parameters (such as auth-user-pass). When this file is imported and the client attempts to validate the file path, it performs an open operation on the path and leaks the user's Net-NTLMv2 hash to an external server. This could be exploited by having a user open a crafted malicious ovpn configuration file.
EPSS 1.14% · 78.8th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.14%
78.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| amazon | aws_client_vpn | 2.0.0 |
| n/a | n/a | n/a |
Exploit Intelligence
Timeline
- Apr 14, 2022 CVE Published
- Apr 15, 2022 EPSS Score
- Jun 4, 2022 EPSS Score
- Jul 25, 2022 EPSS Score
- Sep 14, 2022 EPSS Score
- Dec 23, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
- May 22, 2023 EPSS Score
- Jul 12, 2023 EPSS Score
- Aug 31, 2023 EPSS Score