PatchTheCVECVE-2025-27743: Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
47
This month
HIGH 7.8WATCHLISTDOWNGRADEDOWNGRADEDOWNGRADE
CVE-2025-27743 is a high-severity flaw (CVSS 7.8) affecting system center data protection manager, system center operations manager, system center orchestrator. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
Why this priority
- High severity
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.8 (High) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Weakness | CWE-426 |
| Published | 2025-04-08 |
| Last modified | 2026-06-17 |
Publisher (CNA): Microsoft Corporation · Vendor: microsoft
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
microsoft system center data protection manager DOWNGRADE
Affected: 2019 · 2022 · 2025
Fixed in: no fixed release known
Safe to downgrade to: a release before 2019
1. Check installed version
apt-cache policy system-center-data-protection-manager || rpm -q system-center-data-protection-manager || system-center-data-protection-manager --version
2. No fixed release: DOWNGRADE to a release before 2019 (Debian / Ubuntu)
apt-cache madison system-center-data-protection-manager
sudo apt install system-center-data-protection-manager=<VERSION_BEFORE_2019>
sudo apt-mark hold system-center-data-protection-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list system-center-data-protection-manager
sudo dnf downgrade system-center-data-protection-manager-<VERSION_BEFORE_2019>
sudo dnf versionlock add system-center-data-protection-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
microsoft system center operations manager DOWNGRADE
Affected: 2019 · 2022 · 2025
Fixed in: no fixed release known
Safe to downgrade to: a release before 2019
1. Check installed version
apt-cache policy system-center-operations-manager || rpm -q system-center-operations-manager || system-center-operations-manager --version
2. No fixed release: DOWNGRADE to a release before 2019 (Debian / Ubuntu)
apt-cache madison system-center-operations-manager
sudo apt install system-center-operations-manager=<VERSION_BEFORE_2019>
sudo apt-mark hold system-center-operations-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list system-center-operations-manager
sudo dnf downgrade system-center-operations-manager-<VERSION_BEFORE_2019>
sudo dnf versionlock add system-center-operations-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
microsoft system center orchestrator DOWNGRADE
Affected: 2019 · 2022 · 2025
Fixed in: no fixed release known
Safe to downgrade to: a release before 2019
1. Check installed version
apt-cache policy system-center-orchestrator || rpm -q system-center-orchestrator || system-center-orchestrator --version
2. No fixed release: DOWNGRADE to a release before 2019 (Debian / Ubuntu)
apt-cache madison system-center-orchestrator
sudo apt install system-center-orchestrator=<VERSION_BEFORE_2019>
sudo apt-mark hold system-center-orchestrator
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list system-center-orchestrator
sudo dnf downgrade system-center-orchestrator-<VERSION_BEFORE_2019>
sudo dnf versionlock add system-center-orchestrator
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
microsoft system center service manager DOWNGRADE
Affected: 2019 · 2022 · 2025
Fixed in: no fixed release known
Safe to downgrade to: a release before 2019
1. Check installed version
apt-cache policy system-center-service-manager || rpm -q system-center-service-manager || system-center-service-manager --version
2. No fixed release: DOWNGRADE to a release before 2019 (Debian / Ubuntu)
apt-cache madison system-center-service-manager
sudo apt install system-center-service-manager=<VERSION_BEFORE_2019>
sudo apt-mark hold system-center-service-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list system-center-service-manager
sudo dnf downgrade system-center-service-manager-<VERSION_BEFORE_2019>
sudo dnf versionlock add system-center-service-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
microsoft system center virtual machine manager DOWNGRADE
Affected: 2019 · 2022 · 2025
Fixed in: no fixed release known
Safe to downgrade to: a release before 2019
1. Check installed version
apt-cache policy system-center-virtual-machine-manager || rpm -q system-center-virtual-machine-manager || system-center-virtual-machine-manager --version
2. No fixed release: DOWNGRADE to a release before 2019 (Debian / Ubuntu)
apt-cache madison system-center-virtual-machine-manager
sudo apt install system-center-virtual-machine-manager=<VERSION_BEFORE_2019>
sudo apt-mark hold system-center-virtual-machine-manager
2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)
dnf --showduplicates list system-center-virtual-machine-manager
sudo dnf downgrade system-center-virtual-machine-manager-<VERSION_BEFORE_2019>
sudo dnf versionlock add system-center-virtual-machine-manager
Downgrade risk
Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.
After downgrade
Restart the service, and keep the package held until a fixed release ships.
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-27743?
system center data protection manager: downgrade or apply the listed mitigation; system center operations manager: downgrade or apply the listed mitigation; system center orchestrator: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2025-27743 being exploited?
CVE-2025-27743 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-27743 affect?
CVE-2025-27743 affects system center data protection manager, system center operations manager, system center orchestrator. Severity is high (CVSS 7.8). Untrusted search path in System Center allows an authorized attacker to elevate privileges locally.
How urgent is CVE-2025-27743?
Priority 47/100. High severity; On your watchlist