CVE-2025-59512

HIGH7.8

Customer Experience Improvement Program (CEIP) Elevation of Privilege Vulnerability

Published Nov 11, 2025

Modified 3 months ago

Details

Improper access control in Customer Experience Improvement Program (CEIP) allows an authorized attacker to elevate privileges locally.

References

CVSS Analysis

CVSS v3.1

7.8

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

HighC:H

Integrity

HighI:H

Availability

HighA:H

7.8/CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

Configuration

Ecosystems

Timeline

PublishedNov 11, 2025

ModifiedFeb 26, 2026