CVE-2024-30165

Summary

Amazon AWS Client VPN before 3.9.1 on macOS has a buffer overflow that could potentially allow a local actor to execute arbitrary commands with elevated permissions, a different vulnerability than CVE-2024-30164.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos.html

References

• https://docs.aws.amazon.com/vpn/latest/clientvpn-user/client-vpn-connect-macos.html

• ←Previous
• Next→