Description
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | System Center Data Protection Manager 2019 | - | — |
| Microsoft | System Center Data Protection Manager 2022 | - | — |
| Microsoft | System Center Data Protection Manager 2025 | - | — |
| Microsoft | System Center Operations Manager 2019 | - | — |
| Microsoft | System Center Operations Manager 2022 | - | — |
| Microsoft | System Center Operations Manager 2025 | - | — |
| Microsoft | System Center Orchestrator 2019 | - | — |
| Microsoft | System Center Orchestrator 2022 | - | — |
| Microsoft | System Center Orchestrator 2025 | - | — |
| Microsoft | System Center Service Manager 2019 | - | — |
| Microsoft | System Center Service Manager 2022 | - | — |
| Microsoft | System Center Service Manager 2025 | - | — |
| Microsoft | System Center Virtual Machine Manager 2019 | - | — |
| Microsoft | System Center Virtual Machine Manager 2022 | - | — |
| Microsoft | System Center Virtual Machine Manager 2025 | - | — |
Advisories 3
- WID-SEC-2025-0745 Microsoft System Center: Schwachstelle ermöglicht Privilegieneskalation BSI CERT-Bund (WID) · Apr 8, 2025
- NCSC-2025-0108 Kwetsbaarheid verholpen in Microsoft System Center NCSC-NL (Netherlands) · Apr 8, 2025
- MSRC-CVE-2025-27743 Microsoft System Center Elevation of Privilege Vulnerability Microsoft Security Response Center · Apr 8, 2025
References
- Microsoft System Center Elevation of Privilege Vulnerability vendor-advisory patch