# CVE-2024-24974: Windows: disallow access to the interactive service pipe from remote computers interactive.c: disable remote access to the service pipe Remote access to the service pipe is not needed and might be a potential attack vector. For example, if an attacker manages to get credentials for a user which is the member of "OpenVPN Administrators" group on a victim machine, an attacker might be able to communicate with the privileged interactive service on a victim machine and start openvpn processes remotely. ### References * Release notes: https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html * CVE record: https://www.cve.org/CVERecord?id=CVE-2024-24974 * Reported by: Vladimir Tokarev <​vtokarev@microsoft.com>
0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9