CVE-2025-13833 Details

A vulnerability in SecureConnector for Windows arises when the 'Additional Appliance Connections' setting is activated and the agent's configuration file includes more than three trusted-server entries. Some of these entries lack TLS certificate fingerprints, enabling the agent to accept and connect with a malicious server. An attacker controlling the wired or wireless network can redirect traffic to this malicious server. Subsequently, the attacker can exploit the agent's built-in command and file features to execute arbitrary commands with SYSTEM privileges, thereby gaining full administrative control. This access allows for the disabling of endpoint protections or the exfiltration of data.