CVE-2023-25069 Privilege escalation in TXOne Networks StellarOne
A malicious authenticated user can escalate privileges to administrator level in TXOne StellarOne, allowing unauthorized actions.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-25069?
CVE-2023-25069 is a high-severity vulnerability in Trend Micro, Inc. TXOne Networks StellarOne, published on 17 Mar 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
TXOne StellarOne has an improper access control privilege escalation vulnerability in every version before V2.0.1160 that could allow a malicious, falsely authenticated user to escalate his privileges to administrator level. With these privileges, an attacker could perform actions they are not authorized to. Please note: an attacker must first obtain a low-privileged authenticated user's profile on the target system in order to exploit this vulnerability.
Which versions are affected by CVE-2023-25069?
It affects 1 product.
Products include Trendmicro Txone Stellarone.
How do I fix CVE-2023-25069?
No fix has been published for CVE-2023-25069 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-25069 being exploited?
There is no known exploitation of CVE-2023-25069 in the wild and no public exploit code.
Sources
Also known as GHSA-2x28-xwcm-wq72.