Description
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Configuration Manager | 1.0.0 – < 5.00.9128.1037 | 5.00.9128.1037 |
| Microsoft | Microsoft Configuration Manager 2409 | 1.0.0 – < 5.00.9132.1031 | 5.00.9132.1031 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 1 repository
-
garrettfoster13/CVE-2025-59501 ★ 26 · Nov 12, 2025
CVE-2025-59501 POC code
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 2
- WID-SEC-2025-2414 Microsoft Configuration Manager: Schwachstelle ermöglicht Erlangen von Administratorrechten BSI CERT-Bund (WID) · Nov 2, 2025
- MSRC-CVE-2025-59501 Microsoft Configuration Manager Spoofing Vulnerability Microsoft Security Response Center · Oct 24, 2025
References
- Microsoft Configuration Manager Spoofing Vulnerability vendor-advisory patch