Critical RCE in Widely Deployed VPN Appliance

An unauthenticated remote code execution vulnerability in AcmeGate VPN Appliance allows a remote, unauthenticated attacker to achieve full system compromise via a crafted HTTP request to the management interface.

The vulnerability exists in the web management interface's request parsing logic. A buffer overflow in the URL parsing routine can be triggered with a specially crafted HTTP request, leading to arbitrary code execution in the context of the management daemon (root).

The vulnerability requires no authentication and is exploitable remotely over the network.

Successful exploitation allows a remote attacker to:

• Execute arbitrary commands as root
• Access VPN session data and credentials in transit
• Pivot into the protected network

Upgrade to AcmeGate OS 4.8.2 or later. If immediate patching is not possible, restrict access to the management interface to trusted IP ranges.