CVE-2025-24917

{"id": "CVE-2025-24917", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "vulnreport@tenable.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2025-05-23T16:15:25.163", "references": [{"url": "https://www.tenable.com/security/tns-2025-10", "source": "vulnreport@tenable.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "vulnreport@tenable.com", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation."}, {"lang": "es", "value": "En versiones de Tenable Network Monitor anteriores a 6.5.1 en un host Windows, se descubri\u00f3 que un usuario no administrativo pod\u00eda almacenar archivos en un directorio local para ejecutar c\u00f3digo arbitrario con privilegios de SYSTEM, lo que potencialmente pod\u00eda provocar una escalada de privilegios locales."}], "lastModified": "2025-05-28T14:58:52.920", "sourceIdentifier": "vulnreport@tenable.com"}