CVE-2025-23385
Estado: AnalizadaAlta (7.8)—
In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.14%
- Percentil entre todas las CVEs puntuadas: 3
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
🎯 Técnicas ATT&CK
Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.
- Explotación
T1068Exploitation for Privilege Escalationprivilege escalation95 % - Impacto principal
T1548Abuse Elevation Control Mechanismprivilege escalation85 % - Impacto secundario
T1548.004Elevated Execution with Promptprivilege escalation80 %
Vector CVSS AV:L/PR:L sin UI indica acceso local con escalada de privilegios. CWE-114 (proceso con contexto de privilegios) confirma T1068. El impacto es elevación de privilegios mediante el servicio ETW Host Service.
Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.
🛡️ Mitigaciones ATT&CK que cubren estas técnicas
Tecnologías afectadas (4)
CWE
- CWE-114
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2025-23385",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-23385",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"version": "2.0.3",
"timestamp": "2025-01-28T16:25:22.095430Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "cve@jetbrains.com",
"cvssData": {
"scope": "CHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 6,
"exploitabilityScore": 1.1
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "cve@jetbrains.com",
"affectedData": [
{
"vendor": "JetBrains",
"product": "ReSharper",
"versions": [
{
"status": "affected",
"version": "2024.3",
"lessThan": "2024.3.4",
"versionType": "semver"
},
{
"status": "affected",
"version": "2024.2",
"lessThan": "2024.2.8",
"versionType": "semver"
},
{
"status": "affected",
"version": "0",
"lessThan": "2024.1.7",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "JetBrains",
"product": "Rider",
"versions": [
{
"status": "affected",
"version": "2024.3",
"lessThan": "2024.3.4",
"versionType": "semver"
},
{
"status": "affected",
"version": "2024.2",
"lessThan": "2024.2.8",
"versionType": "semver"
},
{
"status": "affected",
"version": "0",
"lessThan": "2024.1.7",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "JetBrains",
"product": "dotTrace",
"versions": [
{
"status": "affected",
"version": "2024.3",
"lessThan": "2024.3.4",
"versionType": "semver"
},
{
"status": "affected",
"version": "2024.2",
"lessThan": "2024.2.8",
"versionType": "semver"
},
{
"status": "affected",
"version": "0",
"lessThan": "2024.1.7",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "JetBrains",
"product": "ETW Host Service",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "16.43",
"versionType": "semver"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2025-01-28T16:15:41.377",
"references": [
{
"url": "https://www.jetbrains.com/privacy-security/issues-fixed/",
"tags": [
"Vendor Advisory"
],
"source": "cve@jetbrains.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "cve@jetbrains.com",
"description": [
{
"lang": "en",
"value": "CWE-114"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In JetBrains ReSharper before 2024.3.4, 2024.2.8, and 2024.1.7, Rider before 2024.3.4, 2024.2.8, and 2024.1.7, dotTrace before 2024.3.4, 2024.2.8, and 2024.1.7, ETW Host Service before 16.43, Local Privilege Escalation via the ETW Host Service was possible"
},
{
"lang": "es",
"value": "En JetBrains ReSharper antes de 2024.3.4, 2024.2.8 y 2024.1.7, Rider antes de 2024.3.4, 2024.2.8 y 2024.1.7, dotTrace antes de 2024.3.4, 2024.2.8 y 2024.1.7, ETW Host Service antes de 16.43, era posible la escalada de privilegios locales a través del servicio de host ETW."
}
],
"lastModified": "2026-06-17T08:53:56.903",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA1E83F7-8826-4C16-AC4E-0EA394EBF660",
"versionEndExcluding": "2024.1.7"
},
{
"criteria": "cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63C92B5D-1EFC-4A0B-950D-D8929640B91E",
"versionEndExcluding": "2024.2.8",
"versionStartIncluding": "2024.2"
},
{
"criteria": "cpe:2.3:a:jetbrains:dottrace:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8DFCF86D-C418-439A-8AD0-4A401148D6B0",
"versionEndExcluding": "2024.3.4",
"versionStartIncluding": "2024.3"
},
{
"criteria": "cpe:2.3:a:jetbrains:etw_host_service:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F895DD80-363B-442D-87E3-24994B02DAC3",
"versionEndExcluding": "16.43"
},
{
"criteria": "cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C3065499-46FE-48DE-A334-E5ED8A85072E",
"versionEndExcluding": "2024.1.7"
},
{
"criteria": "cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "812D1640-EFD2-4030-B6AE-9AA0923CFB65",
"versionEndExcluding": "2024.2.8",
"versionStartIncluding": "2024.2"
},
{
"criteria": "cpe:2.3:a:jetbrains:resharper:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9349926-4C6C-4259-835D-09609269CEEA",
"versionEndExcluding": "2024.3.4",
"versionStartIncluding": "2024.3"
},
{
"criteria": "cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25FBD05C-2DED-47BB-9AD9-2CB8E4B73ACA",
"versionEndExcluding": "2024.1.7"
},
{
"criteria": "cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B9BFA83D-5863-4722-A7B3-27BAC16F1257",
"versionEndExcluding": "2024.2.8",
"versionStartIncluding": "2024.2.0"
},
{
"criteria": "cpe:2.3:a:jetbrains:rider:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C7A326F4-4B47-4D70-986F-0CF33FBE06B3",
"versionEndExcluding": "2024.3.4",
"versionStartIncluding": "2024.3.0"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@jetbrains.com"
}