CVE-2025-6182

Root Certificate Injection PUBLISHED

Description (CNA)

The StrongDM Windows service incorrectly handled communication related to system certificate management. Attackers could exploit this behavior to install untrusted root certificates or remove trusted ones.

Affected (CNA)

Vendor / product	Versions
StrongDM / sdm	affected 0 through 47.49.0

CWE

CWE-269

References

https://security.strongdm.com/?tcuUid=56fde839-9388-4361-8d3b-9baa7b2de2ed

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.