CVE-2022-24141
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
A vulnerability in iTop VPN 3.2 allows an attacker to steal another user's token by creating a named pipe with the same name used by the iTopVPNmini.exe component. The attacker listens for connections and abuses the ImpersonateNamedPipeClient() function.
Risk Assessment
The risk involves local privilege escalation, potentially leading to unauthorized access to system resources and other users' data.
Recommendation
Immediately update iTop VPN to the latest version that fixes this vulnerability. If an update is not possible, restrict system access to untrusted users.
Original NVD description (English source)
The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient().