CVE-2025-10231 - Vulnerability Details - OpenCVE

An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Microsoft	Windows
N-able	N-central

No data.

No data.

References

Link	Providers
https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm
https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation

History

Thu, 11 Sep 2025 10:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Microsoft Microsoft windows N-able N-able n-central
Vendors & Products		Microsoft Microsoft windows N-able N-able n-central

Wed, 10 Sep 2025 15:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 10 Sep 2025 13:45:00 +0000

Type	Values Removed	Values Added
Description		An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.
Title		N-central Incorrect Default Permissions could lead to Privilege Escalation
Weaknesses		CWE-276
References		https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation
Metrics		cvssV3_1 `{'score': 7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: N-able

Published: 2025-09-10T13:34:41.906Z

Updated: 2025-09-11T03:56:20.758Z

Reserved: 2025-09-10T13:11:53.972Z

Link: CVE-2025-10231

Vulnrichment

Updated: 2025-09-10T13:57:30.673Z

NVD

Status : Awaiting Analysis

Published: 2025-09-10T14:15:35.717

Modified: 2025-09-11T17:14:10.147

Link: CVE-2025-10231

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-10231", "assignerOrgId": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b", "state": "PUBLISHED", "assignerShortName": "N-able", "dateReserved": "2025-09-10T13:11:53.972Z", "datePublished": "2025-09-10T13:34:41.906Z", "dateUpdated": "2025-09-11T03:56:20.758Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "N-central", "vendor": "N-able", "versions": [{"lessThan": "2025.3", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "WithSecure Exposure Management"}], "datePublic": "2025-09-10T13:14:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions."}], "value": "An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b", "shortName": "N-able", "dateUpdated": "2025-09-10T13:34:41.906Z"}, "references": [{"tags": ["release-notes"], "url": "https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm"}, {"tags": ["vendor-advisory"], "url": "https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation"}], "source": {"discovery": "UNKNOWN"}, "title": "N-central Incorrect Default Permissions could lead to Privilege Escalation", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-09-10T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-10231"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-11T03:56:20.758Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10231", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-09-10T13:57:28.125430Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-10T13:57:30.673Z"}}], "cna": {"title": "N-central Incorrect Default Permissions could lead to Privilege Escalation", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "WithSecure Exposure Management"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "N-able", "product": "N-central", "versions": [{"status": "affected", "version": "0", "lessThan": "2025.3", "versionType": "custom"}], "defaultStatus": "unaffected"}], "datePublic": "2025-09-10T13:14:00.000Z", "references": [{"url": "https://documentation.n-able.com/N-central/Release_Notes/GA/Content/N-central_2025.3_Release_Notes.htm", "tags": ["release-notes"]}, {"url": "https://me.n-able.com/s/security-advisory/aArVy0000000jgHKAQ/cve202510231-incorrect-default-permissions-could-lead-to-privilege-escalation", "tags": ["vendor-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.", "supportingMedia": [{"type": "text/html", "value": "An Incorrect File Handling Permission bug exists on the N-central Windows Agent and Probe that, in the right circumstances, can allow a local low-level user to run commands with elevated permissions.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b", "shortName": "N-able", "dateUpdated": "2025-09-10T13:34:41.906Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10231", "state": "PUBLISHED", "dateUpdated": "2025-09-11T03:56:20.758Z", "dateReserved": "2025-09-10T13:11:53.972Z", "assignerOrgId": "a5532a13-c4dd-4202-bef1-e0b8f2f8d12b", "datePublished": "2025-09-10T13:34:41.906Z", "assignerShortName": "N-able"}, "dataVersion": "5.1"}