CVE-2024-53588

CVE-2024-53588 is a DLL hijacking vulnerability in iTop VPN version 16.0. The issue allows attackers to execute arbitrary code by placing a crafted DLL file into the path \ProgramData\iTop VPN\Downloader\vpn6. It is classified under CWE-427 (Untrusted Search Path) and received a CVSS v3.1 base score of 7.8 (High), with the vector AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

A local attacker requires no privileges and can exploit the vulnerability with low attack complexity, though user interaction is needed, such as launching the iTop VPN application. Upon successful exploitation, the attacker achieves high impacts on confidentiality, integrity, and availability through arbitrary code execution.

Details on exploitation and potential mitigations are available in the referenced GitHub repository at https://github.com/JonathanLauener/iTop-privesc, published on 2025-01-23.