[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpXFX41hhGkGRpseYPC5SKlJ7cnENFgnPhbiJEBBSS4U":3,"g5a-risk:CVE-2025-24054":256},{"success":4,"data":5,"meta":253},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":29,"epssTimeSeries":38,"severity":40,"affectedProducts":41,"affectedProductsCount":93,"references":94,"referencesCount":114,"weaknesses":115,"weaknessesCount":124,"isActivelyExploited":4,"cisaInfo":125,"otxData":29,"relatedBlogPosts":127,"seoMetadata":128,"configurations":153,"relatedVendorCves":231,"notableEvents":232},"CVE-2025-24054","What is CVE-2025-24054?","External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.","2025-03-11T17:16:27.66","2025-05-29T16:32:06.563",5.4,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":29,"CVSSMetricV2":29,"CVSSMetricV40":29},[15,32],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":30,"ImpactScore":31},"secure@microsoft.com","Secondary",{"Version":19,"VectorString":20,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":23,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:U\u002FC:H\u002FI:N\u002FA:N","NETWORK","LOW","NONE","REQUIRED","UNCHANGED","HIGH",6.5,"MEDIUM",null,2.8,3.6,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":30,"ImpactScore":36},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":11,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":23,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},2.5,0.6227,[39,39,39,39,37,37,37],0.58909,"Medium",[42,47,50,53,56,59,62,65,68,72,76,78,81,84,87,90],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"microsoft","windows_10_1507","*","cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*",{"vendor":43,"product":48,"version":45,"criteria":49,"vulnerable":4},"windows_10_1607","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*",{"vendor":43,"product":51,"version":45,"criteria":52,"vulnerable":4},"windows_10_1809","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",{"vendor":43,"product":54,"version":45,"criteria":55,"vulnerable":4},"windows_10_21h2","cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:arm64:*",{"vendor":43,"product":57,"version":45,"criteria":58,"vulnerable":4},"windows_10_22h2","cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",{"vendor":43,"product":60,"version":45,"criteria":61,"vulnerable":4},"windows_11_22h2","cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:arm64:*",{"vendor":43,"product":63,"version":45,"criteria":64,"vulnerable":4},"windows_11_23h2","cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",{"vendor":43,"product":66,"version":45,"criteria":67,"vulnerable":4},"windows_11_24h2","cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:arm64:*",{"vendor":43,"product":69,"version":70,"criteria":71,"vulnerable":4},"windows_server_2008","r2","cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",{"vendor":43,"product":73,"version":74,"criteria":75,"vulnerable":4},"windows_server_2012","-","cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",{"vendor":43,"product":73,"version":70,"criteria":77,"vulnerable":4},"cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",{"vendor":43,"product":79,"version":45,"criteria":80,"vulnerable":4},"windows_server_2016","cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",{"vendor":43,"product":82,"version":45,"criteria":83,"vulnerable":4},"windows_server_2019","cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",{"vendor":43,"product":85,"version":45,"criteria":86,"vulnerable":4},"windows_server_2022","cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",{"vendor":43,"product":88,"version":45,"criteria":89,"vulnerable":4},"windows_server_2022_23h2","cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",{"vendor":43,"product":91,"version":45,"criteria":92,"vulnerable":4},"windows_server_2025","cpe:2.3:o:microsoft:windows_server_2025:*:*:*:*:*:*:*:*",16,[95,100,105,110],{"url":96,"source":97,"tags":98},"https:\u002F\u002Fmsrc.microsoft.com\u002Fupdate-guide\u002Fvulnerability\u002FCVE-2025-24054","Microsoft",[99],"Vendor Advisory",{"url":101,"source":102,"tags":103},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2025\u002FApr\u002F28","Seclists",[104],"Mailing List",{"url":106,"source":107,"tags":108},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-detection-script","Vicarius",[109],"Exploit",{"url":111,"source":107,"tags":112},"https:\u002F\u002Fwww.vicarius.io\u002Fvsociety\u002Fposts\u002Fcve-2025-24054-spoofing-vulnerability-in-windows-ntlm-by-microsoft-mitigation-script",[113],"Mitigation",4,[116],{"id":117,"name":118,"description":119,"extendedDescription":120,"status":121,"abstraction":122,"structure":123},"CWE-73","External Control of File Name or Path","The product allows user input to control or influence paths or file names that are used in filesystem operations.","This could allow an attacker to access or modify system files or other files that are critical to the application.\nPath manipulation errors occur when the following two conditions are met:\nFor example, the program may give the attacker the ability to overwrite the specified file or run with a configuration controlled by the attacker.","Draft","Base","Simple",1,{"shortDescription":126,"requiredAction":126,"vulnerabilityName":126,"dateAdded":29},"",[],{"title":129,"metaDescription":130,"keywords":131,"canonicalUrl":132,"structuredData":133},"What is CVE-2025-24054? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-24054, a medium severity cyber security vulnerability from 2025. High exploit probability (62.3%). External control of fil...","CVE-2025-24054, CVE-2025-24054 vulnerability, CVE-2025-24054 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2025, CVSS score, exploit, patch, remediation, microsoft security, windows_10_1507 vulnerability, windows_10_1607 vulnerability, windows_10_1809 vulnerability, windows_10_21h2 vulnerability, windows_10_22h2 vulnerability, high risk vulnerability, actively exploited","\u002Fwhat-is\u002Fcve-2025-24054",{"@context":134,"@type":135,"headline":129,"description":130,"datePublished":9,"dateModified":10,"author":136,"publisher":140,"about":144,"mainEntityOfPage":148,"articleSection":151,"keywords":152},"https:\u002F\u002Fschema.org","TechArticle",{"@type":137,"name":138,"url":139},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":137,"name":138,"url":139,"logo":141},{"@type":142,"url":143},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":145,"name":6,"description":146,"additionalType":147},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":149,"@id":150},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-24054","Cybersecurity","CVE-2025-24054, CVE-2025-24054 vulnerability, CVE-2025-24054 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[154],{"Operator":29,"Negate":29,"Nodes":155},[156],{"Operator":157,"Negate":29,"CPEMatch":158},"OR",[159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,215,217,219,221,223,226,229],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":160,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":161,"VersionEndIncluding":29},"6997DE6E-CBAD-4690-A68C-8F10E477DCC2","10.0.10240.20947",{"Vulnerable":4,"Criteria":163,"MatchCriteriaID":164,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":161,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","3CBCF6D9-5085-473C-82F5-98BC246A9C4C",{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":166,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":167,"VersionEndIncluding":29},"0CF0E174-4692-4AA3-B72E-12E73A1BDBE5","10.0.14393.7876",{"Vulnerable":4,"Criteria":169,"MatchCriteriaID":170,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":167,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","340EF5F8-D4F5-4AD8-9D80-1DEC2F376BE5",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":172,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":173,"VersionEndIncluding":29},"67C8DCD7-90C4-431F-BD03-FDFDE170E748","10.0.17763.7009",{"Vulnerable":4,"Criteria":175,"MatchCriteriaID":176,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":173,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","05169574-28AB-4E42-B3DE-710574BB1AD3",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":178,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":179,"VersionEndIncluding":29},"714C0D5E-BE31-45AB-A729-FF55DE59F593","10.0.19044.5608",{"Vulnerable":4,"Criteria":181,"MatchCriteriaID":182,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":179,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x64:*","0C8B2D45-7059-4FA0-A46C-64A171D287DA",{"Vulnerable":4,"Criteria":184,"MatchCriteriaID":185,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":179,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:x86:*","5569800D-B907-47CC-86D2-EC0118157916",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":187,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":188,"VersionEndIncluding":29},"A84E706C-3A65-4920-8F80-2A684D3CB110","10.0.19045.5608",{"Vulnerable":4,"Criteria":190,"MatchCriteriaID":191,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":188,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*","ED157557-37C1-4802-8746-B87120BA16FA",{"Vulnerable":4,"Criteria":193,"MatchCriteriaID":194,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":188,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*","BE8F0EF2-EED3-4791-AE26-D24D97B673D6",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":196,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":197,"VersionEndIncluding":29},"C8949B3E-5847-42F8-A15A-D7515F0EE305","10.0.22621.5039",{"Vulnerable":4,"Criteria":199,"MatchCriteriaID":200,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":197,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:x64:*","84D4F97D-3BA2-4B7A-B650-5772DE49CE97",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":202,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":203,"VersionEndIncluding":29},"82807292-1736-4453-B805-3D471BF94A35","10.0.22631.5039",{"Vulnerable":4,"Criteria":205,"MatchCriteriaID":206,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":203,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*","E19130AD-ECD6-4FC4-B2C8-AB058BDEF928",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":208,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":209,"VersionEndIncluding":29},"B7ADF37E-1DD3-4539-8922-1E059955FEF1","10.0.26100.3403",{"Vulnerable":4,"Criteria":211,"MatchCriteriaID":212,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":209,"VersionEndIncluding":29},"cpe:2.3:o:microsoft:windows_11_24h2:*:*:*:*:*:*:x64:*","E0A74D52-ABC0-4733-B892-F8688B6AEBA7",{"Vulnerable":4,"Criteria":71,"MatchCriteriaID":214,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F",{"Vulnerable":4,"Criteria":75,"MatchCriteriaID":216,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"A7DF96F8-BA6A-4780-9CA3-F719B3F81074",{"Vulnerable":4,"Criteria":77,"MatchCriteriaID":218,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"DB18C4CE-5917-401E-ACF7-2747084FD36E",{"Vulnerable":4,"Criteria":80,"MatchCriteriaID":220,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":167,"VersionEndIncluding":29},"C7610CDB-A02B-4C62-B17F-6DCE2B3DE4F0",{"Vulnerable":4,"Criteria":83,"MatchCriteriaID":222,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":173,"VersionEndIncluding":29},"D271422D-A29F-4DBF-BF72-BCD90E393A5A",{"Vulnerable":4,"Criteria":86,"MatchCriteriaID":224,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":225,"VersionEndIncluding":29},"AAACC9C4-DDC5-4059-AFE3-A49DB2347A86","10.0.20348.3270",{"Vulnerable":4,"Criteria":89,"MatchCriteriaID":227,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":228,"VersionEndIncluding":29},"EF423F8C-2E8A-46AB-BB2D-C416BF341F92","10.0.25398.1486",{"Vulnerable":4,"Criteria":92,"MatchCriteriaID":230,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":209,"VersionEndIncluding":29},"CF81B44C-8FF7-4C61-9974-3F98DA9D492C",[],[233,240,246],{"id":234,"eventType":235,"eventTime":236,"details":237,"label":238,"color":239},"966dbb8d-9d3d-4684-8896-7cb3efb5f02c","NEW_CISA","2025-04-17T23:45:03.168509+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"id":241,"eventType":242,"eventTime":243,"details":244,"label":245,"color":239},"c41a1336-160b-4e1d-bd5d-93ef884a916c","HIGH_EPSS_DELTA","2025-06-11T10:09:44.10141+00:00","Daily EPSS score increased by 0.288 on 2025-03-13","EPSS Score Increased",{"id":247,"eventType":248,"eventTime":249,"details":250,"label":251,"color":252},"a30f8d23-cf5b-4ae7-9291-bcce58db79cb","LOW_EPSS_DELTA","2025-08-08T04:06:42.080214+00:00","Daily EPSS score decreased by 0.115 on 2025-03-13","EPSS Score Decreased","green",{"lastModified":10,"cacheTime":254,"version":255},1792252242551,"2.0",{"score":257,"band":258,"action":259,"scoredAt":260},77,"High","Emergency patch","2026-10-16T07:06:19.669074+00:00"]