{"id":81414,"date":"2025-10-03T19:49:41","date_gmt":"2025-10-03T19:49:41","guid":{"rendered":""},"modified":"2025-10-09T02:33:13","modified_gmt":"2025-10-09T08:33:13","slug":"cve-2025-11130-missing-authentication-in-ihongren-pptp-vpn-leading-to-potential-system-compromise-or-data-leakage","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-11130-missing-authentication-in-ihongren-pptp-vpn-leading-to-potential-system-compromise-or-data-leakage\/","title":{"rendered":"<strong>CVE-2025-11130: Missing Authentication in iHongRen pptp-vpn Leading to Potential System Compromise or Data Leakage<\/strong>"},"content":{"rendered":"<p><strong>Overview<\/strong><\/p>\n<p>In this article, we delve into a critical vulnerability identified in iHongRen pptp-vpn versions 1.0\/1.0.1 on macOS. This vulnerability, tagged with the CVE identifier CVE-2025-11130, is notable for its potential to compromise systems or lead to data leakage. It exists within the XPC Service component, specifically the function shouldAcceptNewConnection in the file HelpTool\/HelperTool.m. It is essential to be aware of this vulnerability as it can be <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-0078-selinux-bypass-exploitation-leads-to-local-privilege-escalation\/\"  data-wpil-monitor-id=\"88879\">exploited locally<\/a> without any need for authentication, putting sensitive data and system integrity at risk.<\/p>\n<p><strong>Vulnerability Summary<\/strong><\/p>\n<p>CVE ID: CVE-2025-11130<br \/>\nSeverity: High (8.4 CVSS Score)<br \/>\nAttack Vector: Local<br \/>\nPrivileges Required: None<br \/>\nUser Interaction: None<br \/>\nImpact: <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-9443-buffer-overflow-vulnerability-in-tenda-ch22-1-0-0-1-potentially-leads-to-system-compromise\/\"  data-wpil-monitor-id=\"89013\">Potential system<\/a> compromise or data leakage<\/p>\n<p><strong>Affected Products<\/strong><\/p><div id=\"ameeb-2106442793\" class=\"ameeb-content-2 ameeb-entity-placement\"><div style=\"border-left: 4px solid #555; padding-left: 20px; margin: 48px 0; font-family: Roboto, sans-serif; color: #ffffff; line-height: 1.6; max-width: 700px;\">\r\n  <h2 style=\"margin-top: 0; font-size: 20px; font-weight: 600; display: flex; align-items: center;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"display: inline-flex; align-items: center; margin-right: 8px;\">\r\n      <img decoding=\"async\" src=\"https:\/\/www.ameeba.com\/blog\/wp-content\/uploads\/2025\/10\/Best-App-icon-Ameeba.png\" alt=\"Ameeba Chat Icon\" style=\"width: 40px; height: 40px;\" \/>\r\n    <\/a>\r\n    A new way to communicate\r\n  <\/h2>\r\n\r\n  <p style=\"margin-bottom: 12px;\">\r\n    Ameeba Chat is built on encrypted identity, not personal profiles.\r\n  <\/p>\r\n\r\n  <p style=\"margin-bottom: 16px;\">\r\n    Message, call, share files, and coordinate with identities kept separate.\r\n  <\/p>\r\n\r\n  <ul style=\"list-style: none; padding-left: 0; margin-bottom: 20px;\">\r\n    <li>\u2022 Encrypted identity<\/li>\r\n    <li>\u2022 Ameeba Chat authenticates access<\/li>\r\n    <li>\u2022 Aliases and categories<\/li>\r\n    <li>\u2022 End-to-end encrypted chat, calls, and files<\/li>\r\n    <li>\u2022 Secure notes for sensitive information<\/li>\r\n  <\/ul>\r\n\r\n  <p style=\"font-style: italic; font-weight: 600; margin-bottom: 24px;\">\r\n    Private communication, rethought.\r\n  <\/p>\r\n\r\n  <div style=\"display: flex; flex-wrap: wrap; gap: 12px;\">\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\/download\" style=\"background-color: #ffffff; color: #000000; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Download Ameeba Chat<\/a>\r\n    <a href=\"https:\/\/www.ameeba.com\/chat\" style=\"border: 1px solid #ffffff; color: #ffffff; padding: 10px 20px; text-decoration: none; border-radius: 6px; font-weight: 500;\">Learn More<\/a>\r\n  <\/div>\r\n<\/div>\r\n<\/div>\n<p>Product | Affected Versions<\/p>\n<p>iHongRen pptp-vpn | 1.0\/1.0.1<\/p>\n<p><strong>How the Exploit Works<\/strong><\/p>\n<p>This <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-7955-critical-authentication-bypass-vulnerability-in-ringcentral-communications-plugin-for-wordpress\/\"  data-wpil-monitor-id=\"88798\">vulnerability primarily revolves around missing authentication<\/a> in the XPC Service component of iHongRen pptp-vpn. The weakness lies in the shouldAcceptNewConnection function in the file HelpTool\/HelperTool.m. The lack of proper authentication checks allows an attacker with local access to manipulate the function, potentially leading to <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-59017-unauthorized-access-via-ajax-backend-routes-in-typo3-cms\/\"  data-wpil-monitor-id=\"89175\">unauthorized access<\/a>, system compromise, or data leakage.<\/p>\n<p><strong>Conceptual Example Code<\/strong><\/p><div id=\"ameeb-3551094012\" class=\"ameeb-content ameeb-entity-placement\"><div class=\"poptin-embedded\" data-id=\"f6b387694f681\"><\/div>\r\n\r\n\r\n\r\n\r\n\r\n<\/div>\n<p>Below is a simplified, conceptual example of how this vulnerability might be exploited. This is not actual exploit code but a representation to help understand the nature of the vulnerability:<\/p>\n<pre><code class=\"\" data-line=\"\"># Assume the local attacker has access to the macOS terminal\n# They might perform a manipulation like this:\n$ curl -X POST \\\nhttp:\/\/localhost:port\/shouldAcceptNewConnection \\\n-H &#039;Content-Type: application\/json&#039; \\\n-d &#039;{\n&quot;newConnection&quot;: &quot;True&quot;,\n&quot;user&quot;: &quot;Attacker&quot;\n}&#039;<\/code><\/pre>\n<p>In this conceptual example, the attacker sends a POST request to the shouldAcceptNewConnection function, providing their user credentials. Due to the missing authentication, the system accepts the new connection, granting the attacker <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-55370-unauthorized-access-control-vulnerability-in-jsherp-v3-5\/\"  data-wpil-monitor-id=\"89358\">unauthorized access<\/a>.<\/p>\n<p><strong>Mitigation<\/strong><\/p>\n<p>While the vendor has not provided a response or patch for this vulnerability, there are ways to mitigate the risk. One method is to use a Web Application Firewall (WAF) or Intrusion Detection System (IDS) to monitor and block suspicious activities. However, these are temporary solutions, and it is recommended to consistently monitor for any patches or updates from the vendor. Regularly updating and patching <a href=\"https:\/\/www.ameeba.com\/blog\/cve-2025-25180-underprivileged-software-manipulates-gpu-system-calls-for-unauthorized-access\/\"  data-wpil-monitor-id=\"88734\">software is a crucial part of maintaining a secure system<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview In this article, we delve into a critical vulnerability identified in iHongRen pptp-vpn versions 1.0\/1.0.1 on macOS. This vulnerability, tagged with the CVE identifier CVE-2025-11130, is notable for its potential to compromise systems or lead to data leakage. It exists within the XPC Service component, specifically the function shouldAcceptNewConnection in the file HelpTool\/HelperTool.m. It [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"footnotes":""},"categories":[1],"tags":[],"vendor":[77],"product":[],"attack_vector":[],"asset_type":[],"severity":[],"exploit_status":[],"class_list":["post-81414","post","type-post","status-publish","format-standard","hentry","category-uncategorized","vendor-apple"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/81414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/comments?post=81414"}],"version-history":[{"count":6,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/81414\/revisions"}],"predecessor-version":[{"id":82196,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/posts\/81414\/revisions\/82196"}],"wp:attachment":[{"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/media?parent=81414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/categories?post=81414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/tags?post=81414"},{"taxonomy":"vendor","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/vendor?post=81414"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/product?post=81414"},{"taxonomy":"attack_vector","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/attack_vector?post=81414"},{"taxonomy":"asset_type","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/asset_type?post=81414"},{"taxonomy":"severity","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/severity?post=81414"},{"taxonomy":"exploit_status","embeddable":true,"href":"https:\/\/www.ameeba.com\/blog\/wp-json\/wp\/v2\/exploit_status?post=81414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}