Search for vulnerabilities
| Vulnerability ID | VCID-w1eu-fbhk-pucv |
| Aliases |
CVE-2024-4877
|
| Summary | OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it to escalate its privileges |
| Status | Published |
| Exploitability | None |
| Weighted Severity | None |
| Risk | None |
| Affected and Fixed Packages | Package Details |
| CWE-268 | Privilege Chaining |
| Reference id | Reference type | URL |
|---|---|---|
| https://api.first.org/data/v1/epss?cve=CVE-2024-4877 | ||
| CVE-2024-4877 | https://community.openvpn.net/openvpn/wiki/CVE-2024-4877 | |
| msg07634.html | https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07634.html |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
| Attack Vector (AV) | Attack Complexity (AC) | Privileges Required (PR) | User Interaction (UI) | Scope (S) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|---|
network adjacent_network local physical |
low high |
none low high |
none required |
unchanged changed |
high low none |
high low none |
high low none |
| Percentile | 0.46221 |
| EPSS Score | 0.00234 |
| Published At | April 2, 2026, 12:55 p.m. |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| 2026-04-01T18:04:37.153560+00:00 | Vulnrichment | Import | https://github.com/cisagov/vulnrichment/blob/develop/2024/4xxx/CVE-2024-4877.json | 38.0.0 |