Product:
Windows Admin Center
Summary
Improper access control in Windows Admin Center allows an authorized attacker to elevate privileges locally. This vulnerability can lead to significant security risks as it enables unauthorized actions by users with limited access. The issue arises from insufficient checks on user permissions, making it easier for attackers to exploit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-64669 |
Exploitation
To exploit this vulnerability, an attacker with local access to the system can manipulate the access control mechanisms within Windows Admin Center. By leveraging their authorized status, they can perform actions that should be restricted, effectively elevating their privileges and gaining control over sensitive system functions.
Affected Products
- Windows Admin Center: A management tool for Windows Server that allows administrators to manage servers and services.
Mitigation
To mitigate this vulnerability, it is essential to apply the latest security updates provided by Microsoft. Additionally, administrators should review and tighten access controls to ensure that only authorized users have the necessary permissions to perform administrative tasks.