VDB

CVE-2022-25166

CVE-2022-25166 PUBLISHED CVSS 4.300000190734863 MEDIUM

An issue was discovered in Amazon AWS VPN Client 2.0.0. It is possible to include a UNC path in the OpenVPN configuration file when referencing file paths for parameters (such as auth-user-pass). When this file is imported and the client attempts to validate the file path, it performs an open operation on the path and leaks the user's Net-NTLMv2 hash to an external server. This could be exploited by having a user open a crafted malicious ovpn configuration file.

EPSS 1.14% · 78.8th percentile

Risk Scores

CVSS 2.0
4.300000190734863
EPSS Score
1.14%
78.8th percentile

Affected Products

VendorProductVersions
amazonaws_client_vpn2.0.0
n/an/an/a

Timeline

  • Apr 14, 2022 CVE Published
  • Apr 15, 2022 EPSS Score
  • Jun 4, 2022 EPSS Score
  • Jul 25, 2022 EPSS Score
  • Sep 14, 2022 EPSS Score
  • Dec 23, 2022 EPSS Score
  • Feb 11, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 22, 2023 EPSS Score
  • Jul 12, 2023 EPSS Score
  • Aug 31, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›