CVE-2025-6241

MEDIUM EPSS 6.0%

Published Jul 27, 202511mo ago · Modified Jun 17, 20262w ago

4.4 CVSS 3.1

Medium

Published Jul 27, 2025 11mo ago

Last Modified Jun 17, 2026 2w ago

Description

LsiAgent.exe, a component of SysTrack from Lakeside Software, attempts to load several DLL files which are not present in the default installation. If a user-writable directory is present in the SYSTEM PATH environment variable, the user can write a malicious DLL to that directory with arbitrary code. This malicious DLL is executed in the context of NT AUTHORITY\SYSTEM upon service start or restart, due to the Windows default dynamic-link library search order, resulting in local elevation of privileges.

CVSS Details

Base Score

4.4

Exploitability

1.8

Impact

2.5

Vector string

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Attack Vector Local

Attack Complexity Low

Privileges Required None

User Interaction Required

Scope Unchanged

Confidentiality Low

Integrity Low

Availability None

Threat Intelligence

EPSS Exploit Probability

6.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

References 2

documentation.lakesidesoftware.com https://documentation.lakesidesoftware.com/en/Content/Release%20Notes/Agent/10_10_0%20Hotfix%20Agent%20Release%20Notes%20On%20Premises.htm?tocpath=Release%20Notes%7CAgent%7C_____13
kb.cert.org https://www.kb.cert.org/vuls/id/335798

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.