Product:
PowerShell
Summary
Improper access control in Microsoft PowerShell allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2025-25004 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system and be able to execute PowerShell commands. By leveraging improper access controls, the attacker can elevate their privileges, allowing them to perform unauthorized actions on the system. This requires minimal technical skill, making it a significant risk for systems where users have local access.
Affected Products
- Microsoft PowerShell: A scripting language and command-line shell designed for system administration and automation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Microsoft. Additionally, restricting local access to systems and monitoring PowerShell usage can help reduce the risk of exploitation. Implementing strict access controls and user permissions is also advisable.