VULNERABILITY INTELLIGENCE
CVE-2022-23171
CVSS score5.9 MEDIUM
EPSS probability0.68%
CISA KEVNot currently listed
Published2022-06-21
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Description
AtlasVPN - Privilege Escalation Lack of proper security controls on named pipe messages can allow an attacker with low privileges to send a malicious payload and gain SYSTEM permissions on a windows computer where the AtlasVPN client is installed.
Primary references
- cna@cyber.gov.il — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory