PT-2025-46411 · Acat · Acat

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-27725

Positive Technologies (AI Summary)

CVSS v3.1

4.4

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions ACAT versions prior to 3.13

Description A time-of-check time-of-use race condition exists in some ACAT versions prior to 3.13 within Ring 3: User Applications. This can lead to a denial of service. An unprivileged software adversary with an authenticated user, combined with a high complexity attack, may enable denial of service. The issue may occur via local access when attack requirements are not present, without special internal knowledge, and requires active user interaction. The potential impact includes high availability compromise of the vulnerable system, resulting in subsequent system confidentiality, integrity, and availability impacts.

Recommendations Update to version 3.13 or later.

Fix

DoS

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2025-27725

Affected Products

Acat

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-27725 · Security Note
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01388.html · Note
• https://twitter.com/CVEnew/status/1988303470227759515 · Twitter Post