The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade ppp-develUpgrade ppp-debuginfoUpgrade ppp | May 30, 2025 | Apr 22, 2025 |
| Amazon_linux | — | Upgrade ppp | May 28, 2025 | Apr 22, 2025 |
| Debian | — | No solution existsUpgrade ppp | May 15, 2025 | Apr 22, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade ppp | Jul 11, 2025 | Apr 22, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade ppp | Aug 13, 2025 | Jul 10, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade ppp | Jul 21, 2025 | Apr 22, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade ppp | Aug 13, 2025 | Jul 10, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub