Security Vulnerability Report
中文
CVE-2025-59284 CVSS 3.3 LOW

CVE-2025-59284

Published: 2025-10-14 17:16:11
Last Modified: 2025-10-27 19:39:57

Description

Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally.

CVSS Details

CVSS Score
3.3
Severity
LOW
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Configurations (Affected Products)

cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:* - VULNERABLE
Microsoft Windows 10 (所有版本)
Microsoft Windows 11 (所有版本)
Microsoft Windows Server 2016
Microsoft Windows Server 2019
Microsoft Windows Server 2022
Microsoft Windows Server 2025

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# CVE-2025-59284 - Windows NTLM Sensitive Information Exposure PoC # This PoC demonstrates the concept of exploiting NTLM information disclosure # for local spoofing attacks. import os import sys import subprocess import socket # Note: This is a conceptual PoC. Actual exploitation requires # specific conditions and user interaction on a vulnerable Windows system. def check_ntlm_version(): """ Check the Windows NTLM version and configuration on the local system. Vulnerable systems may expose sensitive authentication information. """ try: # Execute Windows command to query NTLM settings result = subprocess.run( ['powershell', '-Command', 'Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa" -Name "NtlmMinClientSec" -ErrorAction SilentlyContinue'], capture_output=True, text=True ) return result.stdout except Exception as e: return f"Error: {e}" def monitor_ntlm_traffic(): """ Monitor local NTLM authentication traffic for sensitive information leakage. On vulnerable systems, NTLM authentication data may be exposed to unauthorized local actors. """ print("[*] Monitoring NTLM authentication activity...") print("[*] On vulnerable systems, sensitive auth tokens may be exposed") print("[*] This information could be used for local spoofing attacks") # Conceptual demonstration of information that could be leaked leaked_info = { "auth_type": "NTLMv1/NTLMv2", "challenge": "<potentially_exposed>", "response": "<potentially_exposed>", "user_domain": "<potentially_exposed>" } return leaked_info def demonstrate_spoofing(): """ Demonstrate the concept of local spoofing using leaked NTLM information. Requires user interaction (UI:R) to trigger on a vulnerable system. """ print("[*] CVE-2025-59284 PoC - Conceptual Demonstration") print("[*] Vulnerability: NTLM Sensitive Information Exposure") print("[*] Attack Vector: Local (AV:L)") print("[*] User Interaction Required: Yes (UI:R)") print("[*] Impact: Low Confidentiality (C:L)") print("") print("[!] This PoC is for educational and authorized testing only.") print("[!] Apply Microsoft security patches to mitigate this vulnerability.") ntlm_info = check_ntlm_version() leaked_data = monitor_ntlm_traffic() print(f"\n[+] NTLM Configuration: {ntlm_info}") print(f"[+] Potentially Leaked Info: {leaked_data}") if __name__ == "__main__": demonstrate_spoofing()

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-59284", "sourceIdentifier": "[email protected]", "published": "2025-10-14T17:16:11.290", "lastModified": "2025-10-27T19:39:57.120", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "baseScore": 3.3, "baseSeverity": "LOW", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 1.4}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 1.8, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-200"}]}, {"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.22621.6060", "matchCriteriaId": "6F387FA2-66C8-4B70-A537-65806271F16A"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.22631.6060", "matchCriteriaId": "A3FEBF91-5010-4C84-B93A-6EFA4838185A"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26100.6899", "matchCriteriaId": "41E9F7AC-8E6D-43A0-A157-48A5E0B5BD0D"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_11_25h2:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26200.6899", "matchCriteriaId": "3B77A066-4F79-4B1F-AECF-58DB4C651EA5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*", "versionEndExcluding": "10.0.26100.6899", "matchCriteriaId": "72C1771B-635B-41E3-84AF-8822467A1869"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59284", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}