---
id: 4052
title: "[CVE-2021-33214] eCatcher Desktop, Version 6.6.4 Advisory"
cve: CVE-2021-33214
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/ecatcher-desktop-advisory"
published_at: "2021-08-17T00:00:00Z"
tags: ["privilege-escalation", "vulnerability", "advisory", "vpn", "ecatcher", "cve-2021-33214"]
phying_url: "https://phying.com/item/4052"
lang: en
---

# [CVE-2021-33214] eCatcher Desktop, Version 6.6.4 Advisory

## Summary

Advisory on CVE-2021-33214 in eCatcher 6.6.4 and earlier: a world-writable service temp directory lets a local attacker swap in a rogue OpenVPN config for privilege escalation; fixed in 6.7.3.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2021-33214
- **Published:** 2021-08-17T00:00:00Z
- **Original:** https://bishopfox.com/blog/ecatcher-desktop-advisory
- **Phying News:** https://phying.com/item/4052
