Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-24917

Improper Access Control leads to Local Privilege Escalation

Description

In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tenable Network Monitor

Default version status: affected

  • 0 to < 6.5.1affected

References