CVE-2013-3496
Last modified
CVE-2013-3496 is a vulnerability of currently unknown severity. Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Infotecs | Vipnet Client | <= 3.2.10 |
| Infotecs | Vipnet Coordinator | <= 3.2.10 |
| Infotecs | Vipnet Personal Firewall | <= 3.1 |
| Infotecs | Vipnet Safedisk | <= 4.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-3496?
How severe is CVE-2013-3496?
How do I fix CVE-2013-3496?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-3489Buffer overflow in Media Player Classic - Home Cinema (MPC-H…7.8
- CVE-2013-3491Multiple cross-site request forgery (CSRF) vulnerabilities i…
- CVE-2013-3492XnView 2.03 has a stack-based buffer overflow vulnerability9.8
- CVE-2013-3493XnView 2.03 has an integer overflow vulnerability9.8
- CVE-2013-3494A Code Execution Vulnerability exists in UMPlayer 0.98 in wi…7.8
- CVE-2013-3495The Intel VT-d Interrupt Remapping engine in Xen 3.3.x throu…
- CVE-2013-3497Juniper Junos Space before 12.3P2.8, as used on the JA1500 a…
- CVE-2013-3498Cross-site scripting (XSS) vulnerability in Juniper SmartPas…
- CVE-2013-3499GroundWork Monitor Enterprise 6.7.0 performs authentication …
- CVE-2013-3500The Foundation webapp admin interface in GroundWork Monitor …
- CVE-2013-3501Multiple cross-site scripting (XSS) vulnerabilities in Groun…
- CVE-2013-3502monarch_scan.cgi in the MONARCH component in GroundWork Moni…
Are you affected by CVE-2013-3496?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST