Plex Media Server 1.41.7.x < 1.42.1 Undisclosed Vulnerability

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(250294);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/09");

  script_name(english:"Plex Media Server 1.41.7.x < 1.42.1 Undisclosed Vulnerability");
  script_cve_id("CVE-2025-34158");

  script_set_attribute(attribute:"synopsis", value:
"The media server software installed on the remote host is affected by an undisclosed vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its version, the Plex Media Server installed on the remote host is 1.41.7.x prior to 1.42.1. It is,
therefore, affected by an undisclosed vulnerability.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  # https://forums.plex.tv/t/plex-media-server-security-update/928341
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?b3b1069a");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Plex Media Server verison 1.42.1 or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-34158");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/08");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/08");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/15");

  script_set_attribute(attribute:"plugin_type", value:"combined");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:plex:media_server");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("plex_media_server_installed_linux.nbin", "macosx_plex_media_server_installed.nbin", "plex_win_installed.nbin", "plex_detect.nbin");
  script_require_keys("installed_sw/Plex Media Server");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Plex Media Server', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
          { 'min_version' : '1.41.7', 'fixed_version' : '1.42.1' }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);