Security Updates for Azure Connected Machine Agent < 1.56 (October 2025)

#%NASL_MIN_LEVEL 80900
##
#
# (C) Tenable, Inc.
#
##

include('compat.inc');

if (description)
{
  script_id(270374);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/17");

  script_cve_id("CVE-2025-58724");
  script_xref(name:"IAVA", value:"2025-A-0761");

  script_name(english:"Security Updates for Azure Connected Machine Agent < 1.56 (October 2025)");

  script_set_attribute(attribute:"synopsis", value:
"The Microsoft Azure Connected Machine Agent installation on the remote host is affected by an elevation of privilege vulnerability.");
  script_set_attribute(attribute:"description", value:
"The Microsoft Azure Connected Machine Agent installation on the remote host is missing security updates. It is,
therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.");
  script_set_attribute(attribute:"solution", value:
"Update to Azure Connected Machine Agent version 1.56 or later");
  script_set_attribute(attribute:"see_also", value:"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-58724");
  
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-58724");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/10/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/10/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/14");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:microsoft:azure_connected_machine_agent");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows : Microsoft Bulletins");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("microsoft_azure_connected_machine_agent_win_installed.nbin", "azure_connected_machine_agent_nix_installed.nbin");
  script_require_keys("installed_sw/Microsoft Azure Connected Machine Agent");

  exit(0);
}

include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'checks': [
    {
      'product': {'name': 'Microsoft Azure Connected Machine Agent', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints': [
            { 'fixed_version' : '1.56' }
      ]
    }
  ]
};
var result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_HOLE);
vdf::handle_check_and_report_errors(vdf_result:result);