PT-2025-22816 · Tenable · Tenable Network Monitor

Will Dormann · Publicado 2024-11-15 · Atualizado 2025-06-03 · CVE-2025-24917

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenable Network Monitor versions prior to 6.5.1

Description A security issue was found where a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.

Recommendations For versions prior to 6.5.1, update to version 6.5.1 or later to resolve the issue.

Correção

LPE

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2025-11614

CVE-2025-24917

Produtos afetados

Tenable Network Monitor

Referências · 8

• https://tenable.com/security/tns-2025-10 · Aviso do Fabricante
• https://twitter.com/TheDakospy/status/1929757146012688735 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-24917 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-11614 · Nota de Segurança
• https://twitter.com/BhuvaneswariM15/status/1927816982755471574 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1926244420225015918 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-24917 · Nota de Segurança
• https://t.me/cvetracker/24550 · Publicação no Telegram