MEDIUM CISA KEV

CVE-2025-24054

CVSS v3

5.4

MEDIUM

EPSS Score

11.9%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

—

SSVC status

Description

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

CISA Known Exploited Vulnerability

Date Added
4/17/2025
Patch Due Date
5/8/2025
Ransomware Use
Unknown

Technical details

Published
3/11/2025
Exploit-DB
EDB-52280 EDB-52478 EDB-52480

Frequently asked questions

What is CVE-2025-24054?

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network.

Is CVE-2025-24054 actively exploited?

Yes. CVE-2025-24054 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 5/8/2025.

What is the CVSS score for CVE-2025-24054?

CVE-2025-24054 has a CVSS v3 base score of 5.4 (MEDIUM severity).

Is CVE-2025-24054 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs
Back to CVE Database