Critical severity9.8NVD Advisory· Published May 21, 2020· Updated Jun 17, 2026
CVE-2020-12828
CVE-2020-12828
Description
An issue was discovered in AnchorFree VPN SDK before 1.3.3.218. The VPN SDK service takes certain executable locations over a socket bound to localhost. Binding to the socket and providing a path where a malicious executable file resides leads to executing the malicious executable file with SYSTEM privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:pango:virtual_private_network_software_development_kit:*:*:*:*:*:*:*:*Range: <1.3.3.218
- AnchorFree/VPN SDKdescription
- Range: <1.3.3.218
Patches
Vulnerability mechanics
References
1- www.pango.co/sec31944/nvdVendor Advisory
News mentions
0No linked articles in our index yet.