PT-2025-47795 · Wazuh · Wazuh

Published 2025-11-21 · Updated 2025-11-21 · CVE-2025-64169

Positive Technologies (AI Summary)

CVSS v4.0

5.1

Medium

Base vector

AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Wazuh versions 3.7.0 through 4.11.9

Description Wazuh is a platform for threat prevention, detection, and response. A flaw exists in the fim alert() implementation where it does not verify if oldsum->md5 is NULL before attempting to access it. A compromised agent can exploit this by sending a crafted message to the Wazuh manager, potentially causing a crash of the analysisd component.

Recommendations Update Wazuh to version 4.12.0 or later.

Exploit

Fix

Unchecked Return Value

NULL Pointer Dereference

Weakness Enumeration

CWE-252

CWE-476

Related Identifiers

BDU:2025-14829

CVE-2025-64169

GHSA-HC35-H924-8596

Affected Products

Wazuh

References · 6

• 🔥 https://github.com/wazuh/wazuh/security/advisories/GHSA-hc35-h924-8596 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/64xxx/CVE-2025-64169.json · Exploit
• https://bdu.fstec.ru/vul/2025-14829 · Security Note
• https://osv.dev/vulnerability/CVE-2025-64169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-64169 · Security Note
• https://t.me/CVEtracker/37969 · Telegram Post