CVE-2022-25165

An issue was discovered in Amazon AWS VPN Client 2.0.0. A TOCTOU race condition exists during the validation of VPN configuration files. This allows parameters outside of the AWS VPN Client allow list to be injected into the configuration file prior to the AWS VPN Client service (running as SYSTEM) processing the file. Dangerous arguments can be injected by a low-level user such as log, which allows an arbitrary destination to be specified for writing log files. This leads to an arbitrary file write as SYSTEM with partial control over the files content. This can be abused to cause an elevation of privilege or denial of service.

• CWE-367

• https://github.com/RhinoSecurityLabs/CVEsExploit, Third Party Advisory
• https://rhinosecuritylabs.com/aws/cve-2022-25165-aws-vpn-client/Exploit, Third Party Advisory
• https://github.com/RhinoSecurityLabs/CVEsExploit, Third Party Advisory
• https://rhinosecuritylabs.com/aws/cve-2022-25165-aws-vpn-client/Exploit, Third Party Advisory

Published

Apr 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2516The Visual Composer Website Builder plugin for WordPress is …5.4
• CVE-2022-25160Cleartext Storage of Sensitive Information vulnerability in …5.9
• CVE-2022-25161Improper Input Validation vulnerability in Mitsubishi Electr…8.6
• CVE-2022-25162Improper Input Validation vulnerability in Mitsubishi Electr…5.3
• CVE-2022-25163Improper Input Validation vulnerability in Mitsubishi Electr…9.8
• CVE-2022-25164Cleartext Storage of Sensitive Information vulnerability in …7.5
• CVE-2022-25166An issue was discovered in Amazon AWS VPN Client 2.0.0. It i…5
• CVE-2022-25167Apache Flume versions 1.4.0 through 1.9.0 are vulnerable to …9.8
• CVE-2022-25168Apache Hadoop's FileUtil.unTar(File, File) API does not esca…9.8
• CVE-2022-25169The BPG parser in versions of Apache Tika before 1.28.2 and …5.5
• CVE-2022-2517The Beaver Builder – WordPress Page Builder for WordPress is…5.4
• CVE-2022-25170The affected product is vulnerable to a stack-based buffer o…7.8