CVE-2017-9606: Infotecs Vipnet Client

High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Infotecs ViPNet Client and Coordinator before 4.3.2-42442 allow local users to gain privileges by placing a Trojan horse ViPNet update file in the update folder. The attack succeeds because of incorrect folder permissions in conjunction with a lack of integrity and authenticity checks.

Affected products

• Infotecs Vipnet Client: up to and including 4.3.1
• Infotecs Vipnet Coordinator: up to and including 4.3.1

Published 2017-06-15. Last modified 2026-06-17.