{"id":"CVE-2024-1195","state":"PUBLISHED","title":"iTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service","description":"A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The identifier VDB-252685 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.","publishedAt":"2024-02-02T21:31:04.043Z","updatedAt":"2024-08-21T15:36:30.204Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"VulDB"},"assigner":"VulDB","products":["iTop VPN"],"affected":[{"vendor":"iTop","product":"VPN","versions":[{"version":"4.0.0.0","status":"affected"},{"version":"4.0.0.1","status":"affected"}],"modules":["IOCTL Handler"]}],"references":["https://vuldb.com/?id.252685","https://vuldb.com/?ctiid.252685","https://www.youtube.com/watch?v=JdQMINPVJd8"],"weaknesses":["CWE-404"],"ingestedAt":"2026-10-29T20:06:59.846Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/1xxx/CVE-2024-1195.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-1195","state":"PUBLISHED","datePublished":"2024-02-02T21:31:04.043Z","dateUpdated":"2024-08-21T15:36:30.204Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2024-02-02T07:17:35.401Z"},"containers":{"cna":{"title":"iTop VPN IOCTL ITopVpnCallbackProcess.sys denial of service","descriptions":[{"lang":"en","value":"A vulnerability classified as critical was found in iTop VPN up to 4.0.0.1. Affected by this vulnerability is an unknown functionality in the library ITopVpnCallbackProcess.sys of the component IOCTL Handler. The manipulation leads to denial of service. The attack needs to be approached locally. The identifier VDB-252685 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way."},{"lang":"de","value":"In iTop VPN bis 4.0.0.1 wurde eine kritische Schwachstelle entdeckt. Es geht um eine nicht näher bekannte Funktion in der Bibliothek ITopVpnCallbackProcess.sys der Komponente IOCTL Handler. Durch Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff muss lokal angegangen werden."}],"affected":[{"vendor":"iTop","product":"VPN","versions":[{"version":"4.0.0.0","status":"affected"},{"version":"4.0.0.1","status":"affected"}],"modules":["IOCTL Handler"]}],"references":[{"url":"https://vuldb.com/?id.252685","tags":["vdb-entry"]},{"url":"https://vuldb.com/?ctiid.252685","tags":["signature","permissions-required"]},{"url":"https://www.youtube.com/watch?v=JdQMINPVJd8","tags":["media-coverage"]}],"metrics":[{"cvssV3_1":{"version":"3.1","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV3_0":{"version":"3.0","baseScore":5.5,"vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","baseSeverity":"MEDIUM"}},{"cvssV2_0":{"version":"2.0","baseScore":4.6,"vectorString":"AV:L/AC:L/Au:S/C:N/I:N/A:C"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-404","type":"CWE","lang":"en","description":"CWE-404 Denial of Service"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2024-02-02T21:31:04.043Z"},"timeline":[{"time":"2024-02-02T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2024-02-02T01:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2024-02-02T08:22:43.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"mrempy (VulDB User)","type":"reporter"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.252685","tags":["vdb-entry","x_transferred"]},{"url":"https://vuldb.com/?ctiid.252685","tags":["signature","permissions-required","x_transferred"]},{"url":"https://www.youtube.com/watch?v=JdQMINPVJd8","tags":["media-coverage","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-01T18:33:24.687Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-08-21T15:36:18.995201Z","id":"CVE-2024-1195","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-21T15:36:30.204Z"}}]}}}