Product:
Windows Remote Access Connection Manager
Summary
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-59230 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By leveraging improper access controls, the attacker can execute malicious actions that elevate their privileges. This can be done without requiring user interaction, making it a significant threat to systems where an attacker can gain physical or remote access.
Affected Products
- Windows Remote Access Connection Manager: This service is responsible for managing remote access connections and is vulnerable to privilege escalation due to improper access controls.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Additionally, restricting local access to systems and monitoring for unauthorized access attempts can help reduce the risk of exploitation.