Back to Database
Status published
High
CVE-2025-1683
Symbolic Link Exploit in 1E Client's - Nomad module allows Arbitrary File Deletion
Vulnerability Description
Improper link resolution before file access in the Nomad module of the 1E Client, in versions prior to 25.3, enables an attacker with local unprivileged access on a Windows system to delete arbitrary files on the device by exploiting symbolic links.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-1683
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Simeon Bunchev
References
More from 1E
View All →CVE-2024-7211
The Duende Identity Server based component in 1E Platform may allow URL redirections to untrusted websites.
Medium
4.7
CVE-2023-5964
1E-Exchange-DisplayMessage instruction allows for arbitrary code execution
Critical
9.9
CVE-2023-45163
1E-Exchange-CommandLinePing instruction before v18.1 allows for arbitrary code execution
Critical
9.9
CVE-2023-45162
Blind SQL vulnerability in 1E platform
Critical
9.9
CVE-2023-45161
1E-Exchange-URLResponseTime instruction before v20.1 allows arbitrary code execution
Critical
9.9
Affected Vendor
Affected Software
1E Client
Vulnerable Versions:
0, 25.3
Timeline
Official Publish:
March 12th, 2025
Last Modified:
June 18th, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H