CVE-2025-59501
MediumCVSS 4.8Exploitation Probability (EPSS)
High risk88th percentile - higher than 88% of all known CVEs
Summary
Authentication bypass by spoofing exists in Microsoft Configuration Manager, allowing an authorized attacker to perform spoofing over an adjacent network. The vulnerability enables an attacker to impersonate a trusted entity.
Risk Assessment
An attacker with access to an adjacent network can spoof a trusted entity, potentially leading to unauthorized access or actions in the environment. This could compromise configuration management integrity.
Recommendation
Apply the security updates for Microsoft Configuration Manager released by the vendor. Additionally, restrict network access to management servers and monitor for suspicious activity.
Other vulnerabilities in Microsoft Configuration Manager
See all- CVE-2026-88075High
SQL injection vulnerability in Microsoft Configuration Manager due to improper neutralization of special elements in SQL commands. An authorized attacker can elevate privileges over a network.
- CVE-2026-70049High
An SQL injection vulnerability exists in Microsoft Configuration Manager. An authorized attacker can exploit this flaw to elevate privileges over an adjacent network.
- CVE-2026-47301High
An improper access control vulnerability in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network. The flaw can be exploited remotely by an authenticated user.
- CVE-2025-47179Medium
Microsoft Configuration Manager contains improper access control allowing an authorized attacker to elevate privileges locally. The vulnerability requires valid credentials but no user interaction.
- CVE-2025-55320Medium
Improper neutralization of special elements used in an SQL command (SQL injection) in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over an adjacent network.
Original NVD description (English source)
Authentication bypass by spoofing in Microsoft Configuration Manager allows an authorized attacker to perform spoofing over an adjacent network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS