High severity · published Jul 28, 2025
CVE-2025-2297
Privilege Management for Windows - Elevation of Privilege
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
Prior to version 25.4.270.0, a local authenticated attacker can manipulate user profile files to add illegitimate challenge response codes into the local user registry under certain conditions. This allows users with the ability to edit their user profile files to elevate their privileges to administrator.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PM
Privilege Management for Windows · BeyondTrust
before <25.4.270 · source: vendor, NVD
Affected product
PM
Privilege Management for Windows
BeyondTrust
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-2297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-2297
Vendor Advisory
https://www.beyondtrust.com/trust-center/security-advisories/bt25-05
More from Privilege Management for Windows
8.8
CVE-2020-12613
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6
7.8
CVE-2025-0889
Prior to 25.2, a local authenticated attacker can elevate privileges on a system with Privilege Management for Windows installed, via the manipulation of COM objects under certain…
7.8
CVE-2024-25083
An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1
7.8
CVE-2020-28369
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp
7.8
CVE-2020-12614
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6