Product:
Windows Remote Access Connection Manager
Summary
Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks if exploited. Attackers with local access can gain higher privileges than intended, potentially compromising the system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-62474 |
Exploitation
To exploit this vulnerability, an attacker must have local access to the system. By leveraging improper access controls, the attacker can execute malicious actions that elevate their privileges. This can lead to unauthorized access to sensitive data and system resources.
Affected Products
- Windows Remote Access Connection Manager: A service that enables remote access to Windows systems, which is vulnerable to privilege escalation due to improper access control.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Regularly reviewing access controls and ensuring that only authorized users have local access can also help reduce the risk of exploitation.