CVE-2022-24141

5.4 mediumEPSS 0.6%

Medium (5.4) in iobit itop vpn. EPSS 0.6% chance of exploitation in the next 30 days.

The iTopVPNmini.exe component of iTop VPN 3.2 will try to connect to datastate_iTopVPN_Pipe_Server on a loop. An attacker that opened a named pipe with the same name can use it to gain the token of another user by listening for connections and abusing ImpersonateNamedPipeClient().

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 47% of CVEs (scores of 2026-10-31)
Published: 2022-07-06
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

iobit:itop_vpn

References

https://github.com/tomerpeled92/CVE/
https://github.com/tomerpeled92/CVE/

Check your stack JSON