CVE-2025-25598

Summary

CVE-2025-25598 is a newly discovered vulnerability affecting the Inova Logic CUSTOMER MONITOR (CM) v3.1.757.1. This issue stems from an incorrect access control in the scheduled tasks console. Malicious actors can exploit this flaw by placing a specially crafted executable into a scheduled task, thereby escalating their privileges. This vulnerability poses a significant risk, as it allows attackers to gain unauthorized access to sensitive customer data and potentially disrupt system operations. Organizations using this product are urged to patch immediately to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.