Vulnerability Details CVE-2025-1683
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 15.0%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2025-1683
-
-
cpe:2.3:a:1e:platform:18.1
-
cpe:2.3:a:1e:platform:20.1
-
cpe:2.3:a:1e:platform:23.0
-
cpe:2.3:a:1e:platform:23.11.1.15
-
cpe:2.3:a:1e:platform:23.7.1
-
cpe:2.3:a:1e:platform:23.7.1.80
-
cpe:2.3:a:1e:platform:24.7
-
cpe:2.3:a:1e:platform:25.1
-
cpe:2.3:a:1e:platform:25.2
-
cpe:2.3:a:1e:platform:8.1.2
-
cpe:2.3:a:1e:platform:8.4.1
-
cpe:2.3:a:1e:platform:8.4.1.229
-
cpe:2.3:a:1e:platform:9.0.1