{"id":"CVE-2013-3496","aliases":["EUVD-2013-3431","GHSA-2qhm-42jf-9593"],"status":"published","title":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier,...","description":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.","severity":{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00387,"percentile":0.33019,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2013-05-22T10:00:00Z","modified":"2026-06-16T23:55:17Z","products":[{"vendor":"infotecs","product":"vipnet_client"},{"vendor":"infotecs","product":"vipnet_coordinator"},{"vendor":"infotecs","product":"vipnet_personal_firewall"},{"vendor":"infotecs","product":"vipnet_safedisk"}],"references":[{"url":"http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-3496"},{"url":"https://github.com/advisories/GHSA-2qhm-42jf-9593"}],"sources":{"cve":[{"id":"CVE-2013-3496","description":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.","status":"published","published":"2013-05-22T10:00:00Z","modified":"2024-09-17T00:36:11.501Z","updated_at":"2026-11-02T14:34:56.872243Z"}],"euvd":[{"id":"EUVD-2013-3431","description":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.","status":"published","published":"2013-05-22T10:00:00Z","modified":"2024-09-17T00:36:11Z","updated_at":"2026-11-03T00:28:57.378482Z"}],"ghsa":[{"id":"GHSA-2qhm-42jf-9593","title":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier,...","description":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.","status":"published","published":"2022-05-17T05:09:33Z","modified":"2023-01-28T05:03:15Z","updated_at":"2026-11-02T14:43:56.576463Z"}],"nvd":[{"id":"CVE-2013-3496","description":"Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.","status":"published","published":"2013-05-22T13:29:56.17Z","modified":"2026-06-16T23:55:17.167Z","cvss":[{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:29.210317Z"}]}}