CVE-2025-4660CWE-276

Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access

High · published May 13, 2025

CVSS v4.0
8.7
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

⚡ A named pipe left wide open could let attackers waltz right in and take control of your system! 👀 Think of this as a hotel reception desk with a sign that says, 'Everyone is welcome!' — anyone can just walk up and make changes to your room key without any verification, opening the door to serious trouble. An attacker could redirect the SecureConnector Agent to chat with their own rogue server, issuing malicious commands as if they were you. This could lead to unauthorized access to sensitive data or complete system control — absolutely devastating!

Put simply

Think of this as a hotel reception desk with a sign that says, 'Everyone is welcome!' — anyone can just walk up and make changes to your room key without any verification, opening the door to serious trouble. The vulnerability stems from improper access controls on a named pipe within the Windows agent component of SecureConnector, allowing unauthenticated remote connections from any network attacker.

What to do

An attacker could redirect the SecureConnector Agent to chat with their own rogue server, issuing malicious commands as if they were you. This could lead to unauthorized access to sensitive data or complete system control — absolutely devastating! To secure your system, restrict access to the named pipe and implement proper authentication controls. It's crucial to review your firewall settings and consider patching to mitigate this risk — don’t wait! You’ve got this! By taking action, you can safeguard your system and stay one step ahead of the attackers! 🛡️

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/R:U/V:C/RE:M/U:Amber
EPSS
0.01183 · 67.5th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2025-05-13T17:34Z
EPSS history
Timeline
  • 13 MAY 17:34Z
    Remote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access
    cvelistv5