Description: An external researcher has detected a local privilege escalation vulnerability in the Barracuda Network Access Client (NAC/VPN) for Windows prior to version 5.2.2 .
Details: Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation.
CVSS: 7.8
CVE: CVE-2021-42711
Barracuda Networks: This vulnerability was fixed with client release 5.2.2