CVE-2025-30075

Published: Sep 16, 2025Modified: Jun 17, 2026Deferred

2.2

Vector

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

Exploitability: 0.8 / Impact: 1.4

Source: MITRE (Secondary)

Description

In Alludo MindManager before 25.0.208 on Windows, attackers could potentially execute code as other local users on the same machine if they could write DLL files to directories within victims' DLL search paths.

Related CWEs

CWE-673

External Influence of Sphere Definition

The product does not prevent the definition of control spheres from external actors.

References (1)

https://pastebin.com/5CaNfyGH

Source: cve@mitre.org

Timeline

No history available yet.