CVE-2014-5455 EXPLOIT
5.3
MEDIUM · CVSS 3.1 · EPSS 1% (pctl 60)
Patch early
A public exploit exists.
Description
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.
Scoring
| CVSS | 5.3 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| EPSS | 0.96% — more likely to be exploited than 60% of all CVEs |
| Weakness | CWE-428 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2014-08-25 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| openvpn | openvpn |
| privatetunnel | privatetunnel |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | OpenVPN Private Tunnel Core Service - Unquoted Service Path Privilege Escalation | 2014-07-12 |
References
- http://osvdb.org/show/osvdb/109007
- http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/34037
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5192.php
- https://github.com/CVEProject/cvelist/pull/3909
- https://github.com/CVEProject/cvelist/pull/3909/commits/ace34f1cf94602f31760d3eb7ae68e17df8f914d
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05325943
- http://osvdb.org/show/osvdb/109007
- http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html
- http://www.exploit-db.com/exploits/34037
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5192.php
- https://github.com/CVEProject/cvelist/pull/3909
- https://github.com/CVEProject/cvelist/pull/3909/commits/ace34f1cf94602f31760d3eb7ae68e17df8f914d
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05325943
→ the Explorer · watch your stack · NVD