Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2025-47178

Description

Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Configuration Manager allows an authorized attacker to execute code over an adjacent network.

POC

Reference

No PoCs from references.

Github

- https://github.com/nomi-sec/PoC-in-GitHub

- https://github.com/synacktiv/CVE-2025-47178