CVE-2025-10231

Опубликовано: 10 сент. 2025

Источник: nvd

CVSS3: 7

CVSS3: 7.8

EPSS Низкий

Описание

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.

Ссылки

https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm
Release Notes
https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:n-able:n-central:*:*:*:*:*:*:*:*

Версия до 2025.3 (исключая)

EPSS

Процентиль: 1%

0.00011

Низкий

7 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276

Связанные уязвимости

GHSA-8284-hqgr-8gf6

CVSS3: 7

github

5 месяцев назад

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.

EPSS

Процентиль: 1%

0.00011

Низкий

7 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-276