Remote Code Execution Vulnerability in SecureConnector for Windows by Forescout

CVE-2025-13833

What is CVE-2025-13833?

A vulnerability in SecureConnector for Windows arises when the 'Additional Appliance Connections' setting is enabled and the configuration file contains over three trusted-server entries without TLS certificate fingerprints. This oversight permits the agent to connect with malicious servers if an attacker controls the network. Consequently, the attacker can manipulate the agent’s functionalities to execute arbitrary commands as SYSTEM, compromising the system fully, which enables disabling endpoint protections and data exfiltration.

References