CVE-2014-5455

5.3 MEDIUM
Published: August 25, 2014 Modified: May 28, 2026
View on NVD

Description

Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/show/osvdb/109007
Source: cve@mitre.org
Broken Link
http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html
Source: cve@mitre.org
Exploit
http://www.exploit-db.com/exploits/34037
Source: cve@mitre.org
Exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5192.php
Source: cve@mitre.org
Exploit
https://github.com/CVEProject/cvelist/pull/3909
Source: cve@mitre.org
https://github.com/CVEProject/cvelist/pull/3909/commits/ace34f1cf94602f31760d3eb7ae68e17df8f914d
Source: cve@mitre.org
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05325943
Source: cve@mitre.org
Third Party Advisory
http://osvdb.org/show/osvdb/109007
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.exploit-db.com/exploits/34037
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5192.php
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
https://github.com/CVEProject/cvelist/pull/3909
Source: af854a3a-2127-422b-91ae-364da2661108
https://github.com/CVEProject/cvelist/pull/3909/commits/ace34f1cf94602f31760d3eb7ae68e17df8f914d
Source: af854a3a-2127-422b-91ae-364da2661108
https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05325943
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

14 reference(s) from NVD

Quick Stats

CVSS v3 Score
5.3 / 10.0
EPSS (Exploit Probability)
1.0%
57th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-428 CWE-428

Affected Vendors

privatetunnel openvpn

Related CVEs

CVE-2026-48777 N/A
CVE-2026-47750 7.8
CVE-2026-47747 7.8
CVE-2026-46448 5.4
CVE-2026-22313 9.1