CWE Code: 732
Vulnerability Type: privilege_escalation
CVSS Score: 9.0
CWE Name:  Incorrect Permission Assignment for Critical Resource
Summary: purevpn 6.0.1 for windows suffers from a system privilege escalation vulnerability in its "sevpnclient" service. when configured to use the openvpn protocol, the "sevpnclient" service executes "openvpn.exe" using the openvpn config file located at %programdata%\purevpn\config\config.ovpn. this file allows "write" permissions to users in the "everyone" group. an authenticated attacker may modify this file to specify a dynamic library plugin that should run for every new vpn connection attempt. this plugin will execute code in the context of the system account.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2018-04-18
Last Modified Date: 2019-10-03