PT-2025-31115 · Crowdstrike · Defendpoint

CVE-2025-6250 · Publicado 2025-07-28 · Atualizado 2025-08-04

Positive Technologies (AI Summary)

CVSS v4.0

7.1

Alta

Vetor base

AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Symantec Defendpoint versions prior to 25.4.270.0

Description Prior to version 25.4.270.0, when wmic.exe is elevated with a full admin token, a user can stop the Defendpoint service, bypassing anti-tamper protections. Once the service is disabled, a malicious user can add themselves to the Administrators group and run any process with elevated permissions.

Recommendations Update Symantec Defendpoint to version 25.4.270.0 or later.

Correção

LPE

Enumeração de Fraquezas

CWE-424

Identificadores relacionados

CVE-2025-6250

Produtos afetados

Defendpoint

Referências · 8

• https://twitter.com/CVEnew/status/1949862267161387176 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-6250 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-6250 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1949934120672358625 · Publicação no Twitter
• https://beyondtrust.com/trust-center/security-advisories/bt25-06 · Aviso do Fabricante
• https://t.me/CVEtracker/28584 · Publicação no Telegram
• https://t.me/cveNotify/130750 · Publicação no Telegram
• https://twitter.com/the_yellow_fall/status/1950350203799699581 · Publicação no Twitter