« Volver al listado

CVE-2025-1704

Estado: AnalizadaMedia (6.5)—

ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices and intercept device management requests via loading components from the unencrypted stateful partition.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Google — Chrome OS

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-1704",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-1704",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-04-17T15:48:23.843965Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f",
      "affectedData": [
        {
          "vendor": "Google",
          "product": "ChromeOS",
          "versions": [
            {
              "status": "affected",
              "version": "15823.23.0",
              "lessThan": "15823.23.0",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-04-16T23:15:44.937",
  "references": [
    {
      "url": "https://issues.chromium.org/issues/b/359915523",
      "tags": [
        "Broken Link"
      ],
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
    },
    {
      "url": "https://issuetracker.google.com/issues/359915523",
      "tags": [
        "Exploit",
        "Issue Tracking",
        "Mailing List"
      ],
      "source": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-416"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 15823.23.0 on Chromebooks allows enrolled users with local access to unenroll devices \nand intercept device management requests via loading components from the unencrypted stateful partition."
    },
    {
      "lang": "es",
      "value": "La modificación de ComponentInstaller en ComponentInstaller en Google ChromeOS 124.0.6367.34 en Chromebooks permite a los usuarios inscritos con acceso local cancelar la inscripción de dispositivos e interceptar solicitudes de administración de dispositivos mediante la carga de componentes desde la partición con estado no cifrada."
    }
  ],
  "lastModified": "2026-06-17T08:39:38.053",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:chrome_os:15823.23.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9B52C42-EB41-440C-B651-F2E86898655F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f"
}