https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Mon, 14 Sep 2026 09:06:18 +0000 https://vulnerability.circl.lu/sighting/8cc60a0a-28cb-41c0-a99e-bf680269dbd7/export {"uuid": "8cc60a0a-28cb-41c0-a99e-bf680269dbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:47.752376Z"} {"uuid": "8cc60a0a-28cb-41c0-a99e-bf680269dbd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-09T00:00:47.752376Z"} https://vulnerability.circl.lu/sighting/8cc60a0a-28cb-41c0-a99e-bf680269dbd7/export Wed, 09 Sep 2026 00:00:47 +0000 https://vulnerability.circl.lu/sighting/640d8f9f-bd7e-41be-80f9-56aa249d85a3/export {"uuid": "640d8f9f-bd7e-41be-80f9-56aa249d85a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T01:00:04.023064Z"} {"uuid": "640d8f9f-bd7e-41be-80f9-56aa249d85a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-08T01:00:04.023064Z"} https://vulnerability.circl.lu/sighting/640d8f9f-bd7e-41be-80f9-56aa249d85a3/export Tue, 08 Sep 2026 01:00:04 +0000 https://vulnerability.circl.lu/sighting/44218842-d636-40da-90fd-6b30e94d8384/export {"uuid": "44218842-d636-40da-90fd-6b30e94d8384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:09.209187Z"} {"uuid": "44218842-d636-40da-90fd-6b30e94d8384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:03:09.209187Z"} https://vulnerability.circl.lu/sighting/44218842-d636-40da-90fd-6b30e94d8384/export Wed, 02 Sep 2026 01:03:09 +0000 https://vulnerability.circl.lu/sighting/9f089565-a035-4217-8e4c-4f2d3040bfc6/export {"uuid": "9f089565-a035-4217-8e4c-4f2d3040bfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:34.528626Z"} {"uuid": "9f089565-a035-4217-8e4c-4f2d3040bfc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "GHSA-V8P8-4W8F-QH34", "type": "seen", "source": "https://t.me/hacking_Attack/14865", "content": "Exploit Collector\nSecurepoint SSL VPN Client 2.0.30 Local Privilege Escalation\n\nhttps://4.bp.blogspot.com/-hg5R_Iy9kqs/WWlu56TnyEI/AAAAAAAAIJM/rTW1_kDHOwg4grZYYDaMUD1TyZ2BewRDQCLcBGAs/s1600/h107.png \nSecurepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.\n\nMD5 | 208329c265e24386a862dffeddea96d3\n\nDownload\nLocal Privilege Escalation in Securepoint SSL VPN Client 2.0.30\n\nMetadata\n===================================================\nRelease Date: 29-Jun-2021\nAuthor: Florian Bogner @ https://bee-itsecurity.at\nAffected product: Securepoint SSL VPN Client \nFixed in: version 2.0.32\nTested on: Windows 10 x64 fully patched\nCVE: CVE-2021-35523\nURL: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/\nVulnerability Status: Fixed with new release\n\nVulnerability Description (copied from the CVE Details)\n===================================================\nSecurepoint SSL VPN Client v2 before 2.0.32 on Windows has unsafe configuration handling that enables local privilege escalation to NT AUTHORITY\\SYSTEM. A non-privileged local user can modify the OpenVPN configuration stored under \"%APPDATA%\\Securepoint SSL VPN\" and add a external script file that is executed as privileged user.\n\nA full vulnerability description is available here: https://bogner.sh/2021/06/local-privilege-escalation-in-securepoint-ssl-vpn-client-2-0-30/ \n\nSuggested Solution\n===================================================\nEnd-users should update to the latest available version.\n\nDisclosure Timeline\n===================================================\n14.04.2021: The vulnerability was discovered and reported to security@securepoint.de\n15.04.2021: The report was triaged\n26.04.2021: Securepoint SSL VPN Client Version 2.0.32 was released, which contains an initial fix for the vulnerability\n23.06.2021: Securepoint SSL VPN Client Version 2.0.34 was released, which contains additional security measures.\n28.06.2021: CVE-2021-35523 was assigned: https://nvd.nist.gov/vuln/detail/CVE-2021-35523 \n29.06.2021: Responsible disclosure in cooperation with Securepoint: https://github.com/Securepoint/openvpn-client/security/advisories/GHSA-v8p8-4w8f-qh34\n\n___________\n\nFlorian Bogner\nInformation Security Expert, Speaker\n\nBee IT Security Consulting GmbH\nNibelungenstra\u00dfe 37\n3123 A-Schweinern\n\nMail: florian.bogner@bee-itsecurity.at\nWeb: https://www.bee-itsecurity.at\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:34.528626Z"} https://vulnerability.circl.lu/sighting/9f089565-a035-4217-8e4c-4f2d3040bfc6/export Tue, 01 Sep 2026 20:02:34 +0000