CVE-2025-13833

Full vulnerability record from the local CVENow database.

Description

A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish sessions with a malicious server. An attacker who controls the wired or wireless network can redirect traffic to a malicious server. The attacker can then use the agent’s built‑in command/file features to execute arbitrary commands as SYSTEM, granting full administrative control and the ability to disable endpoint protections or exfiltrate data.

Severity

HIGH

CVSS score

7.7 (v4.0)

Vulnerability status

Deferred

Source identifier

a14582b7-06f4-4d66-8e82-3d7ba3739e88

Published

2026-10-26 21:17:01.887000

Last modified

2026-10-28 14:10:00.220000

View original CVE JSON

{
  "id": "CVE-2025-13833",
  "sourceIdentifier": "a14582b7-06f4-4d66-8e82-3d7ba3739e88",
  "published": "2026-10-26T21:17:01.887",
  "lastModified": "2026-10-28T14:10:00.220",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish sessions with a malicious server. An attacker who controls the wired or wireless network can redirect traffic to a malicious server. The attacker can then use the agent’s built‑in command/file features to execute arbitrary commands as SYSTEM, granting full administrative control and the ability to disable endpoint protections or exfiltrate data."
    },
    {
      "lang": "es",
      "value": "Existe una vulnerabilidad en SecureConnector para Windows cuando la configuración ’Additional Appliance Connections’ está habilitada y el archivo de configuración del agente contiene más de tres entradas de servidor de confianza. Algunas entradas omiten las huellas digitales del certificado TLS, lo que permite al agente aceptar y establecer sesiones con un servidor malicioso. Un atacante que controla la red cableada o inalámbrica puede redirigir el tráfico a un servidor malicioso. El atacante puede entonces usar las funciones integradas de comando/archivo del agente para ejecutar comandos arbitrarios como SYSTEM, otorgando control administrativo total y la capacidad de desactivar las protecciones del endpoint o exfiltrar datos."
    }
  ],
  "affected": [
    {
      "source": "a14582b7-06f4-4d66-8e82-3d7ba3739e88",
      "affectedData": [
        {
          "vendor": "Forescout Technologies",
          "product": "SecureConnector",
          "defaultStatus": "unaffected",
          "platforms": [
            "Windows"
          ],
          "versions": [
            {
              "version": "0",
              "lessThan": "11.3.20",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV40": [
      {
        "source": "a14582b7-06f4-4d66-8e82-3d7ba3739e88",
        "type": "Secondary",
        "cvssData": {
          "version": "4.0",
          "vectorString": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "baseScore": 7.7,
          "baseSeverity": "HIGH",
          "attackVector": "ADJACENT",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "HIGH",
          "vulnAvailabilityImpact": "HIGH",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "subAvailabilityImpact": "NONE",
          "exploitMaturity": "NOT_DEFINED",
          "confidentialityRequirement": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "valueDensity": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "a14582b7-06f4-4d66-8e82-3d7ba3739e88",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://support.forescout.com",
      "source": "a14582b7-06f4-4d66-8e82-3d7ba3739e88"
    }
  ]
}