Riskcovery

CVE-2025-1683

Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion

State
Published
Severity
7.8 High
Published
Mar 12, 2025
Updated
Jun 18, 2025
Reserved
Feb 25, 2025

Read the record on cve.org

Description

Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H1E

Weaknesses

  • CWE-59 Improper Link Resolution Before File Access ('Link Following')

Affected Products

ProductVersions
1E Client1E
  • 24.5 and earlierAffectedfrom MSP-Q23583Not affectedfrom MSP-Q23591Not affected
  • 25.1 and earlierAffectedfrom MSP-Q23589Not affectedfrom MSP-Q23591Not affected
  • 25.3Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.