Product:
Nessus Agent Tray App
Summary
A vulnerability has been identified in the installation and uninstallation of the Nessus Agent Tray App on Windows Hosts which could lead to escalation of privileges. This issue allows unauthorized users to gain higher access levels than intended. The vulnerability poses significant risks to system integrity and confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.3 | CVE-2025-36640 |
Exploitation
To exploit this vulnerability, an attacker with local access to the affected Windows host can manipulate the installation or uninstallation process of the Nessus Agent Tray App. By executing specific commands or scripts, the attacker can escalate their privileges, potentially gaining unauthorized access to sensitive data and system functions.
Affected Products
- Nessus Agent Tray App: Vulnerable during installation and uninstallation processes, allowing privilege escalation.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Tenable for the Nessus Agent Tray App. Additionally, restrict local access to the system and monitor for any unauthorized installation or uninstallation attempts.