Description
In Tenable Network Monitor versions prior to 6.5.1 on a Windows host, it was found that a non-administrative user could stage files in a local directory to run arbitrary code with SYSTEM privileges, potentially leading to local privilege escalation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tenable | Network Monitor | < 6.5.1 | 6.5.1 |
Advisories 1
- WID-SEC-2025-1136 Tenable Security Nessus Network Monitor: Mehrere Schwachstellen ermöglichen Privilegieneskalation BSI CERT-Bund (WID) · May 22, 2025