PT-2025-22902 · Unknown · Proactivanet

Published

2025-05-26

·

Updated

2025-05-27

·

CVE-2025-40672

CVSS v4.0

8.5

High

VectorAV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions ProactivaNet version 3.24.0.0
Description A Privilege Escalation issue has been found in ProactivaNet, allowing any user to override the file panLoad.exe that will be executed by the SYSTEM user via a programmed task. This would allow an attacker to obtain administrator permissions to perform various activities, such as accessing sensitive information, executing code remotely, and even causing a denial of service (DoS).
Recommendations For ProactivaNet version 3.24.0.0, consider restricting access to the panLoad.exe file to prevent unauthorized overrides until a patch is available. As a temporary workaround, disabling the execution of panLoad.exe via programmed tasks may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

DoS

LPE

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2025-40672

Affected Products

Proactivanet