CVE-2014-5455
MEDIUM · CVSS 5.3EPSS 1.0%EU EUVD
Unquoted Windows search path vulnerability in the ptservice service prior to PrivateTunnel version 3.0 (Windows) and OpenVPN Connect version 3.1 (Windows) allows local users to gain privileges via a crafted program.exe file in the %SYSTEMDRIVE% folder.
Key facts
- CVSS score
- 5.3 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L- Weakness (CWE)
- CWE-428
- EPSS score
- 1.0% (61th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2014-5342)
- Published
- August 25, 2014
- NVD last modified
- June 17, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2014-5342 in the EU Vulnerability Database. Last updated in EUVD on May 28, 2026.
View on the EU Vulnerability DatabaseAffected products
- openvpn / openvpn
- privatetunnel / privatetunnel
References
- http://osvdb.org/show/osvdb/109007(Broken Link)
- http://packetstormsecurity.com/files/127439/OpenVPN-Private-Tunnel-Privilege-Escalation.html(Exploit)
- http://www.exploit-db.com/exploits/34037(Exploit)
- http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5192.php(Exploit)
- https://github.com/CVEProject/cvelist/pull/3909
- https://github.com/CVEProject/cvelist/pull/3909/commits/ace34f1cf94602f31760d3eb7ae68e17df8f914d
- https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05325943(Third Party Advisory)
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain