Approved changes feed: RSS · Atom

cpe:2.3:a:shrew:vpn_client:2.2.2:*:*:*:*:*:*:*

part: a version: 2.2.2 update: *

VendorShrew (96fb4325-44b9-59bf-8678-b84e187d7d0f)
ProductVpn Client (65289f2e-f3aa-5a02-b1bd-775484e5cf8f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25283 vulnerable 2026-06-08 05:13:42.178358 Shrew Soft VPN Client 2.2.2 - 'iked' Unquoted Service Path
HIGH (7.8)
Shrew Soft VPN Client 2.2.2 contains an unquoted service path vulnerability that allows local users to execute arbitrary code with elevated system privileges. Attackers can place malicious executables in the unquoted service path to gain elevated access during service startup or system reboot.
Published: 2026-02-04T23:17:24.510Z
Updated: 2026-03-05T01:25:58.372Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.