What is CVE-2025-6250?

CVE-2025-6250 is a medium-severity vulnerability in Beyondtrust Privilege Management For Windows, classified under CWE-424. CVSS score: 6.7/10. Published 2025-07-28.

How severe is CVE-2025-6250?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Beyondtrust Privilege Management For Windows

CVE-2025-6250

Prior to 25.4.270.0, when wmic.exe is elevated with a full admin token the user can stop the Defendpoint service, bypassing anti-tamper protections. Once the service is disabled, the malicious user can add themselves to Administrators grou…

EPSS: 0.002 (5.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Beyondtrust Privilege Management For Windows — versions 0
Beyondtrust Privilege_management_for_windows

Weakness classification (CWE)

CWE-424

References

13061848-ea10-403d-bd75-c83a022c2891 (Vendor Advisory)

Frequently asked questions

What is CVE-2025-6250?: CVE-2025-6250 is a medium-severity vulnerability in Beyondtrust Privilege Management For Windows, classified under CWE-424. CVSS score: 6.7/10. Published 2025-07-28.
How severe is CVE-2025-6250?: Medium severity. CVSS v3 base score is 6.7 out of 10.