CVE-2025-27740

EPSS 3.27%
Veröffentlicht 08.04.2025 17:23:20
Zuletzt bearbeitet 10.07.2025 15:08:52
Erkennungen
Login

Active Directory Certificate Services Elevation of Privilege Vulnerability

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 10 VulnDex Vulnerability Enrichment 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows Server 2008 Update sp2 HwPlatform x64

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86

Microsoft ≫ Windows Server 2008 Version r2 Update sp1 HwPlatform x64

Microsoft ≫ Windows Server 2012 Version -

Microsoft ≫ Windows Server 2012 Version r2

Microsoft ≫ Windows Server 2016 Version < 10.0.14393.7969

Microsoft ≫ Windows Server 2019 Version < 10.0.17763.7136

Microsoft ≫ Windows Server 2022 Version < 10.0.20348.3453

Microsoft ≫ Windows Server 2022 23h2 Version < 10.0.25398.1551

Microsoft ≫ Windows Server 2025 Version < 10.0.26100.3775

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.27%	0.871

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-1390 Weak Authentication

The product uses an authentication mechanism to restrict access to specific users or identities, but the mechanism does not sufficiently prove that the claimed identity is correct.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-27740

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2025-27740

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2025-27740

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2025-27740

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2025-27740