CVE-2025-0664 - A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library · CoreCVE

Back Back to CVE browser

MEDIUM

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library

Published Jul 21, 2025

6.7

MEDIUM

CVSS 4.0

EPSS 0.17%

Description

A locally authenticated, privileged user can craft a malicious OpenSSL configuration file, potentially leading the agent to load an arbitrary local library. This may impair endpoint defenses and allow the attacker to achieve code execution with SYSTEM-level privileges.

Affected products

Vendor Trellix Product Trellix Endpoint Security (HX) Agent Default
unaffected
- Version
  36.30.0 and 35.31.28
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Trellix Endpoint Security (HX) Agent

unaffected

Version	Status	Constraints
36.30.0 and 35.31.28	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22054		Advisory
https://thrive.trellix.com/s/article/000014450

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner trellix

Published Jul 21, 2025

Updated Jul 21, 2025

Reserved Jan 23, 2025

Link CVE-2025-0664

CISA Vulnrichment

Updated Jul 21, 2025

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-0664

Severity n/a

Public date n/a

Links CVE-2025-0664

Assigner trellix

Published Jul 21, 2025

Updated Jul 21, 2025

Exploited since n/a

Link EUVD-2025-22054

EUVD-2025-22054