CyberGhost VPN for Windows Vulnerable to Command Injection

The Windows client of CyberGhost VPN older than version 8.3.10.10015 is vulnerable to a flaw that could allow attackers to perform command line injection and escalate their privileges on the impacted system. According to a report by the security researcher who discovered the flaw, a specially crafted JSON payload sent to the CyberGhost RPC service …

The post CyberGhost VPN for Windows Vulnerable to Command Injection appeared first on RestorePrivacy.

attackers client command command injection command line cyberghost flaw injection json payload privacy and security news privileges report researcher security security researcher system version vpn vulnerable windows