CVE-2025-6250
BaseFortify
Publication date: 2025-07-28
Last updated on: 2025-08-04
Assigner: BeyondTrust
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| beyondtrust | privilege_management_for_windows | to 25.4.270 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-424 | The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability allows a user with an elevated full admin token to stop the Defendpoint service by using wmic.exe before version 25.4.270.0. Stopping this service bypasses anti-tamper protections, enabling the malicious user to add themselves to the Administrators group and run any process with elevated permissions.
How can this vulnerability impact me? :
The vulnerability can lead to privilege escalation where a malicious user can gain administrative rights by stopping a critical security service. This can result in unauthorized access, control over the system, and the ability to run any process with elevated permissions, potentially compromising system security.