CVE:CVE-2017-9606
CNNVD:CNNVD-201706-680
Infotecs ViPNet Client和Coordinator都是德国Infotecs公司的产品。Infotecs ViPNet Client是一套基于软件的VPN解决方案的客户端；Coordinator是服务端。
Infotecs ViPNet Client和Coordinator 4.3.2-42442之前的版本中存在安全漏洞，该漏洞源于错误的文件夹权限和缺少完整性和身份验证检测。本地攻击者可通过向更新文件夹中安置恶意的ViPNet更新文件利用该漏洞获取特权。
solution:Upgrade infotecs vipnet_client to a higher version than 4.3.1,and avoid the version (,4.3.1]; Upgrade infotecs vipnet_coordinator to a higher version than 4.3.1,and avoid the version (,4.3.1]