NetSight
medium6.5

CVE-2025-48802

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

Impact

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network.

Affected products

VendorProductAffected versions
MicrosoftWindows 11 22h2
before 10.0.22621.5624
MicrosoftWindows 11 23h2
before 10.0.22631.5624
MicrosoftWindows Server 2022
before 10.0.20348.3932
MicrosoftWindows Server 2022 23h2
before 10.0.25398.1732

Weakness classification

References