Unrated severityNVD Advisory· Published Jul 13, 2023· Updated Oct 30, 2024

CVE-2023-37849

Description

A DLL hijacking vulnerability in Panda Security VPN for Windows prior to version v15.14.8 allows attackers to execute arbitrary code via placing a crafted DLL file in the same directory as PANDAVPN.exe.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Panda Security/VPN for Windowsdescription
Pandasecurity/Panda VPNllm-create
Range: <15.14.8

Patches

Vulnerability mechanics

References

heegong.github.io/posts/Local-privilege-escalation-in-Panda-Dome-VPN-for-Windows-Installer/mitre
www.pandasecurity.com/en/homeusers/vpn/mitre
www.pandasecurity.com/en/support/cardmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000