CyberRota Analysis
AI-GeneratedA vulnerability exists in the FortiSSLVPN plugin for NetworkManager, where improper handling of carriage-return/line-feed characters in VPN connection profile credentials allows local unprivileged users to craft malicious profiles. Exploiting this flaw can lead to arbitrary code execution with root privileges upon activation of the compromised VPN connection. Organizations using NetworkManager with the FortiSSLVPN plugin should prioritize patching this vulnerability to mitigate potential security risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in NetworkManager-fortisslvpn, the FortiSSLVPN plugin for NetworkManager. The nm-fortisslvpn-service improperly handles carriage-return/line-feed (CR/LF) characters in VPN connection profile credentials. A local unprivileged user can exploit this by crafting a malicious VPN profile to inject additional configuration directives. This can lead to arbitrary code execution with root privileges when the crafted VPN connection is activated.