IXON VPN Client Local Privilege Escalation Vulnerability on Windows

A local privilege escalation vulnerability has been identified in the IXON VPN Client for Windows, prior to version 1.4.4. This vulnerability allows a low-privileged user to execute code that escalates privileges to the SYSTEM level. The issue arises from a temporary configuration file in a world-writable directory, which can be overwritten, creating a race condition that enables the exploitation.

Impact

Exploitation of this vulnerability allows for local privilege escalation, giving a low-privileged user SYSTEM-level rights.