CVE-2025-27740
Published: 08 April 2025
Summary
CVE-2025-27740 is a high-severity Weak Authentication (CWE-1390) vulnerability in Microsoft Windows Server 2008. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 20.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2025-27740 is a weak authentication vulnerability in Windows Active Directory Certificate Services, assigned CWE-1390 and carrying a CVSS 3.1 base score of 8.8. The flaw permits network-based attacks that require only low-privilege credentials and no user interaction, resulting in complete loss of confidentiality, integrity, and availability on affected systems.
An authorized attacker with valid but limited credentials can exploit the weakness over the network to escalate privileges, obtaining administrative control of the certificate services environment and any resources it protects.
Microsoft has published an advisory for CVE-2025-27740 that includes remediation guidance; the current EPSS score of 0.0117 (peak 0.0171) remains low and shows no material post-disclosure increase.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-10142
Vulnerability details
Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Helps detect exploitation of weak authentication mechanisms by notifying of previous unauthorized logons.
The IA policy requires strong authentication methods, reducing use of weak authentication.
Enforces dynamic, context-aware authentication that mitigates weak static authentication by increasing requirements based on risk or conditions.
Enforces authentication for users, reducing the viability of weak authentication mechanisms.
Requires authentication mechanisms to meet applicable standards and guidelines, preventing weak authentication.