CVE-2025-59501

Medium

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent…

secure@microsoft.com·CWE-290·Published 2025-10-31

CVSS

4.8

EPSS

0.03

KEV

Exploits

cve.orgen

144 chars

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.

NVDen

144 chars

Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	4.8	—	—	CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
3.1	Secondary	NVD	4.8	1.2	3.6