In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

References
History

Tue, 16 Sep 2025 19:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 16 Sep 2025 16:00:00 +0000

Type Values Removed Values Added
Description DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none. In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.
Weaknesses CWE-673
References
Metrics cvssV3_1

{'score': 2.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N'}


Tue, 16 Sep 2025 15:45:00 +0000

Type Values Removed Values Added
Description DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-09-16T18:27:11.018Z

Reserved: 2025-03-16T00:00:00.000Z

Link: CVE-2025-30075

cve-icon Vulnrichment

Updated: 2025-09-16T17:30:44.460Z

cve-icon NVD

Status : Received

Published: 2025-09-16T16:15:41.237

Modified: 2025-09-16T16:15:41.237

Link: CVE-2025-30075

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.