CVE-2025-1790
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-1790
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Local privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows user could exploit this vulnerability to gain elevated privileges on the affected system.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:H/IR:H/AR:H/MVC:H/MVI:H/MVA:H/MSI:H/MSA:H/S:P/AU:N/V:C
Source: CVE Program / CVE List V5
Vulnerability Type
带着不必要的权限执行
Source: CVE Program / CVE List V5
Vulnerability Title
Genetec Sipelia Plugin 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Genetec Sipelia Plugin是美国Genetec公司的一个通信管理插件。 Genetec Sipelia存在安全漏洞，该漏洞源于本地权限提升，可能导致经过身份验证的低权限Windows用户获得系统提升的权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Genetec Inc. | Genetec Sipelia | <2.14.271 | - |
II. Public POCs for CVE-2025-1790
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-1790
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same weakness: CWE-250
- CVE-2026-71846
Insights-client: insights-client: clusterrole grants cluster - CVE-2026-72508
Multicloud-operators-subscription: multicloud-operators-subs - CVE-2026-17445
IBM i is Affected By Improper Validation Vulnerability in Li - CVE-2026-18669
IBM i is Affected By A Privilege Escalation Vulnerability [] - CVE-2026-17110
IBM i is Affected By Multiple Vulnerabilities in SQL
V. Comments for CVE-2025-1790
No comments yet