CVE-2018-3952

HIGH

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execu...

Affects 1 product across 1 vendor.

CVSS 3.18.8
EPSS0.9%
Percentile58th
PatchUnknown
CVSS Vector — Plain English Requires local access, low complexity, low privileges required, no user interaction needed, can impact systems beyond the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-78: OS Command Injection

Attacker injects OS commands through application inputs passed to system() or equivalent calls, leading to arbitrary command execution.

Related Attack Patterns (CAPEC)
CAPEC-43 Exploiting Multiple Input Interpretation Layers
via CWE-78
CAPEC-108 Command Line Execution through SQL Injection
via CWE-78
CAPEC-6 Argument Injection
via CWE-78
CAPEC-15 Command Delimiters
via CWE-78
CAPEC-88 OS Command Injection
via CWE-78

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2018. A high severity vulnerability affects Nordvpn systems (CVE-2018-3952). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2018-GLOBAL-129923-H • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2018-3952?
This vulnerability was disclosed in 2018. A high severity vulnerability affects Nordvpn systems (CVE-2018-3952). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2018-3952?
CVE-2018-3952 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS: 0.9%.
Is CVE-2018-3952 actively exploited?
No confirmed active exploitation of CVE-2018-3952 as of 2026-05-30.
How do I remediate CVE-2018-3952?
Priority: MEDIUM.
What systems are affected by CVE-2018-3952?
CVE-2018-3952 affects Nordvpn Nordvpn.
Vulnerability Details
CVE IDCVE-2018-3952
BSIDBS-2018-GLOBAL-129923-H BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Published2018-09-07
Last Modified2024-11-21
ICS Relevance15%
Weakness (CWE)
OS Command Injection
SourceNVD
Official Description

An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: An exploitable code execution vulnerability exists in the connect functionality of NordVPN 6.14.28.0. A specially crafted configuration file can cause a privilege escalation, resulting in the execution of arbitrary commands with system privileges. CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Exploitation Likelihood: MINIMAL

Affected Products
VendorProductAffected Versions
Nordvpn Nordvpn 6.14.28.0
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 2960 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash192ad628f28db6ae33d77ef68bc444f11d8ddcb4f72cf064ad419612e806432352619e3d54678e2925c74b902689a09f7ce46f0b1789dd90362e53942a0702f5
Related CVEs affecting Nordvpn
CVE-2018-10170 9.8 NordVPN 6.12.7.0 for Windows suffers from a SYSTEM privilege escalation vulne... CVE-2018-9105 8.8 NordVPN 3.3.10 for macOS suffers from a root privilege escalation vulnerabili... CVE-2020-36992 7.8 Nord VPN 6.31.13.0 contains an unquoted service path vulnerability in its nor... CVE-2018-25368 7.5 Nord VPN 6.14.31 contains a denial of service vulnerability that allows unaut... CVE-2019-25572 5.5 NordVPN 6.19.6 contains a denial of service vulnerability that allows local a...
View all Nordvpn CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →