Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-13833— Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution

Quick assessment

Affected
Forescout Technologies SecureConnector
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

当启用“其他设备连接”设置，且代理的配置文件中包含超过三个受信任服务器条目时，Windows SecureConnector 存在安全漏洞。部分条目未包含 TLS 证书指纹，导致代理能够接受并与恶意服务器建立会话。控制有线或无线网络的攻击者可重定向流量至恶意服务器，随后利用代理内置的命令/文件功能以 SYSTEM 身份执行任意命令，从而获得完全的管理控制权，并可禁用终端保护或窃取数据。

CVSS 7.7 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-13833

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Insecure TLS Fingerprint Validation in ForeScout SecureConnector Configuration Enables Remote Code Execution
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability exists in SecureConnector for Windows when the “Additional Appliance Connections” setting is enabled and the agent’s configuration file contains more than three trusted‑server entries. Some entries omit TLS certificate fingerprints, which allows the agent to accept and establish sessions with a malicious server. An attacker who controls the wired or wireless network can redirect traffic to a malicious server. The attacker can then use the agent’s built‑in command/file features to execute arbitrary commands as SYSTEM, granting full administrative control and the ability to disable endpoint protections or exfiltrate data.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
证书验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Forescout Technologies SecureConnector 0 ~ 11.3.20 -

II. Public POCs for CVE-2025-13833

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-13833

请登录查看更多情报信息。

Other References for CVE-2025-13833 (1)

IV. Related Vulnerabilities

Same product: SecureConnector
Same weakness: CWE-295