Unscored severity · published Jan 22, 2015
CVE-2015-0925
The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is…
–
CVSS
52.2%
EPSS
No
On KEV
Description
The client in iPass Open Mobile before 2.4.5 on Windows allows remote authenticated users to execute arbitrary code via a DLL pathname in a crafted Unicode string that is improperly handled by a subprocess reached through a named pipe, as demonstrated by a UNC share pathname.
Exploitation
Is it being used?
Exploit prediction (EPSS)52.2% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IO
Ipass Open Mobile · Ipass
through 2.4.4 · source: NVD