CNNVD-202507-173 Information

CNNVD ID

CNNVD-202507-173

CVE-2025-34078

  • CNNVD Published: 2025-07-02

Description (Chinese)

NSClient++是NSClient开源的一个用于Windows系统的监控代理程序。 NSClient++ 0.5.2.35版本存在安全漏洞,该漏洞源于配置不安全,可能导致权限提升。

Description (English)

NSClit++ is a monitoring agent for the Windows system at the NSClit open source. NSClit++ 0.5.2.35 has a security loophole, which stems from unsafe configurations and may lead to increased access.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

NSClient

Published

2025-07-02

Last Modified

2026-02-24

References

https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/local/nscp_pe.rb https://vulncheck.com/advisories/nsclient-localtoremote-system-compromise https://www.exploit-db.com/exploits/46802 https://www.exploit-db.com/exploits/48360

Patch

https://nsclient.org/

Share on: