Arbitrary Code Execution Vulnerability in MIM Admin Service by MIM Software

CVE-2025-1701

What is CVE-2025-1701?

A vulnerability exists in the MIM Admin service that allows for arbitrary code execution through a specially crafted request sent over the RMI interface. This interface, while limited to local machine access (listening on 127.0.0.1), poses significant risks if the network has been compromised. Attackers with expertise in MIM's structure and a foothold in the system can leverage this vulnerability to execute commands with the privileges of the MIM Admin service. Furthermore, systems exposed via RDP or other multi-user application virtualization could be at higher risk if the hosting environment is not secured appropriately.

References