CVE-2018-10647

CVE-2018-10647 describes a SYSTEM privilege escalation vulnerability in SaferVPN 4.2.5 for Windows. An authenticated attacker can manipulate OpenVPN configuration files within the user's local application data directory. This allows the attacker to specify a malicious dynamic library plugin that will execute with SYSTEM privileges whenever a new VPN connection is attempted. The vulnerability has a CVSS score of 7.8 (HIGH), indicating a low attack complexity and local access requirement, leading to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.