PT-2025-17938 · Unknown · Ngeniusone

Jorge Escabias · Published 2025-04-25 · Updated 2025-08-18 · CVE-2025-32980

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions nGeniusONE versions prior to 6.4.0 b2350

Description The issue is related to a weak sudo configuration.

Recommendations For versions prior to 6.4.0 b2350, update to version 6.4.0 b2350 or later to resolve the issue.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-32980

Affected Products

Ngeniusone

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-32980 · Security Note
• https://netscout.com/securityadvisories · Note
• https://twitter.com/CVEnew/status/1915877097924624651 · Twitter Post
• https://t.me/cveNotify/132725 · Telegram Post
• https://t.me/cvetracker/22398 · Telegram Post
• https://t.me/cvedetector/23790 · Telegram Post