Security Updates for Azure File Sync Agent (August 2025)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(250285);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/08/15");

  script_cve_id("CVE-2025-53729");
  script_xref(name:"MSKB", value:"5063825");
  script_xref(name:"MSKB", value:"5063486");
  script_xref(name:"MSKB", value:"5056953");
  script_xref(name:"MSKB", value:"5040925");
  script_xref(name:"MSKB", value:"5063613");
  script_xref(name:"MSFT", value:"MS24-5063825");
  script_xref(name:"MSFT", value:"MS24-5063486");
  script_xref(name:"MSFT", value:"MS24-5056953");
  script_xref(name:"MSFT", value:"MS24-5040925");
  script_xref(name:"MSFT", value:"MS24-5063613");
  script_xref(name:"IAVA", value:"2025-A-0591");

  script_name(english:"Security Updates for Azure File Sync Agent (August 2025)");

  script_set_attribute(attribute:"synopsis", value:
"The Microsoft Azure File Sync Agent is affected by an elevation of privilege vulnerability.");
  script_set_attribute(attribute:"description", value:
"The Microsoft Azure File Sync Agent running on the remote host is prior to 18.3,
19.x prior to 19.2, 20.x prior to 20.1, or 21.x prior to 21.1. It is, therefore affected by an elevation of
privilege vulnerability.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/advisory/CVE-2025-53729");
  # https://learn.microsoft.com/en-us/azure/storage/file-sync/file-sync-release-notes
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?3f9550a9");
  script_set_attribute(attribute:"solution", value:
"Update Microsoft Azure File Sync Agent in accordance with vendor instructions.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-53729");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/08/12");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/08/12");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/08/15");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:microsoft:azure_file_sync_agent");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("microsoft_azure_file_sync_agent_win_installed.nbin");
  script_require_keys("installed_sw/Microsoft Azure File Sync Agent");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match': {'os': 'windows'}}
  ],
  'checks': [
    {
      'product': {'name': 'Microsoft Azure File Sync Agent', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
        {'equal': '21.0', 'fixed_display': '21.1'},
        {'min_version': '20.0', 'fixed_version': '20.1'},
        {'min_version': '19.0', 'fixed_version': '19.2'},
        {'min_version': '17.0', 'fixed_version': '18.3'}
      ]
    }
  ]
};
var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);