Servers and applications
CVE-2014-5455
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.
- Severity
- Medium 5.3
- Published
- 25 Aug 2014
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 1% in the next 30 daysHigher than 61% of CVEs. EPSS by FIRST, 12 Nov 2026
- Weakness
- CWE-428
- Attack
- Needs local access · Needs a user account · No user action needed
- Attacker can
- Read some data · Change some data · Slow it down
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
OpenVPNServers and applications · cpe:a:openvpn:openvpn |
|